A shared developer-deployer framework
The act assigns different responsibilities to developers and deployers. Developers must supply specified technical documentation, while deployers have direct notice and response obligations when covered systems materially influence consequential decisions.
Rights after certain adverse outcomes
- Plain-language information following specified adverse outcomes.
- Access to relevant personal data and correction of factually inaccurate data.
- Meaningful human review and reconsideration in covered circumstances.
- Retention of records needed to demonstrate compliance for at least three years.
Rulemaking remains important
The Colorado Attorney General’s implementation materials remain a key source to monitor before the 2027 effective date. Future rules or guidance may add operational detail without changing the statute’s basic lifecycle.