SB 26-189 applies to automated decision-making technology (ADMT) used in "consequential decisions" — decisions that have a material legal or similarly significant effect on a consumer's access to, or the cost, terms, or availability of, opportunities in seven specific domains.
Education
Consequential decisions in education include admissions, financial aid, academic assessment, and disciplinary actions where AI plays a role. If your institution uses AI to screen applications, flag students for intervention, or automate grading in ways that affect academic standing, SB 26-189 applies.
University admissions offices using AI-assisted application review, K-12 districts deploying automated behavioral flagging systems, and ed-tech platforms that use predictive analytics to determine student pathways all fall within scope.
Employment
This covers hiring, promotion, termination, compensation, and other employment decisions where AI contributes to the outcome. Resume screening tools, automated interview analysis, performance prediction models, and workforce reduction algorithms are all in scope.
The employment domain is likely to see the most enforcement attention because the harms are concrete and the affected population is large. Any employer using AI in any stage of the employment lifecycle — from sourcing candidates to deciding layoffs — should assume coverage.
Financial Services
AI-assisted credit decisions, loan underwriting, fraud detection that affects account access, and automated investment recommendations fall here. This includes both consumer-facing products and business lending decisions where the borrower is an individual or small business.
Financial institutions already regulated under ECOA, Regulation B, and FCRA may qualify for the safe harbor under Section 6-1-1706, but only for activities within the scope of those federal laws.
Government Services
When government agencies use AI to determine eligibility for benefits, allocate public resources, or make enforcement decisions, those uses are covered. This includes automated eligibility determination for social services, predictive policing tools that inform resource allocation, and AI-assisted adjudication of government claims.
Healthcare
AI in clinical decision support, treatment recommendations, insurance coverage determinations, and resource allocation within healthcare settings is covered. HIPAA-covered entities have a safe harbor for activities governed by HIPAA regulations, but healthcare organizations use AI in many contexts that fall outside HIPAA's clinical scope — employment decisions, billing, and patient communications, for example.
Housing
AI used in tenant screening, mortgage qualification, rental pricing, property valuations, and housing availability determinations is in scope. This includes both residential and commercial housing decisions where the tenant or buyer is an individual consumer.
Insurance
Underwriting, claims processing, pricing, and coverage determination decisions where AI plays a role are covered. Insurers operating under Colorado insurance code Section 10-3-1104.9 have a safe harbor, but it applies only to activities within the scope of that statute. An insurer using AI in employment decisions or vendor procurement does not get safe harbor coverage for those activities.
Check Your AI Governance Posture
Search your company in the AI Clear registry to see how your transparency practices compare.