A shared developer-deployer framework
The act assigns different responsibilities to developers and deployers. Developers must supply specified technical documentation, while deployers have direct notice and response obligations when covered systems materially influence consequential decisions.
Rights after certain adverse outcomes
- Plain-language information following specified adverse outcomes.
- Access to relevant personal data and correction of factually inaccurate data.
- Meaningful human review and reconsideration in covered circumstances.
- Retention of records needed to demonstrate compliance for at least three years.
Rulemaking remains important
The Colorado Attorney General’s October 6 interim draft remains proposed. Its staffing example would treat a covered employer as the Deployer when it commissions a firm’s automated shortlist and uses that output to decide whom to hire. The example does not settle every agency workflow; read the current staffing explainer for its scope and limits.