The Colorado AI Act — formally the Automated Decision-Making Technology (ADMT) provisions — is already in effect. Unlike the EU AI Act, which has a phased rollout, Colorado's law is live and enforceable today.
The penalty structure
The fine structure is what makes this law particularly impactful: up to $20,000 per violation per consumer. That means a single undisclosed automated decision affecting 10,000 users could create $200 million in theoretical liability.
What it requires
The law focuses on automated decision-making technology used in "consequential decisions" — decisions that affect employment, housing, insurance, credit, education, or access to essential services.
Companies using ADMT for consequential decisions must:
- Disclose that automated technology is being used
- Explain the purpose and nature of the automated decision
- Provide opt-out mechanisms where feasible
- Document the decision-making process
- Conduct impact assessments for high-risk uses
Who is in scope
Any company that uses automated decision-making affecting Colorado consumers. This includes:
- SaaS companies with automated approval or denial workflows
- E-commerce platforms with algorithmic pricing
- HR tech companies with automated screening
- Fintech companies with automated underwriting
- Insurance companies with algorithmic risk assessment
What SaaS companies should do now
- Inventory your automated decisions. Map every place your product makes or influences a decision without direct human intervention.
- Update your disclosures. Privacy policies, terms of service, and product UI should clearly state where automation is used.
- Build opt-out mechanisms. Where feasible, give users the ability to request human review.
- Get an independent assessment. AI Clear scores your public disclosures against the same standards regulators are looking for.
Colorado is the first state with meaningful enforcement, but it will not be the last. Companies that build compliance now will be ahead when other states follow.
See where your company stands
AI Clear scores companies on AI transparency. Search the registry or request your scorecard.