CO-ADMT
Colorado Automated Decision-Making Technology Act (SB 26-189)
- Art. 6-1-1701. Definitions. ref
- Art. 6-1-1702. Developer responsibilities - documentation. (9)
- Art. 6-1-1703. Deployer record keeping. (2)
- Art. 6-1-1704. Deployer disclosures - point-of-interaction notice - (10)
- Art. 6-1-1705. Consumer rights - correction - human review and (5)
- Art. 6-1-1706. Enforcement by the attorney general - deceptive trade (9)
- Art. 6-1-1707. Liability - fault - allocation - no joint and several (5)
- Art. 6-1-1708. Compliance with other legal obligations - insurers - (8)
- Art. 6-1-1709. No new private right of action - application of other (5)
Article 6-1-1702. Developer responsibilities - documentation.
9 obligations
CO-ADMT-6-1-1702-01
Transparency
Provide General Statement of Intended and Harmful Uses
A developer must make available to each deployer of a covered ADMT a general statement describing the intended uses and
CO-ADMT-6-1-1702-02
Transparency
Disclose Training Data Categories
A developer must provide deployers with a description of the categories of data, including personal data, used to train
CO-ADMT-6-1-1702-03
Transparency
Disclose Known Limitations and Risks
A developer must disclose to deployers the known limitations of the covered ADMT, including known risks and circumstance
CO-ADMT-6-1-1702-04
Documentation
Provide Instructions for Appropriate Use, Monitoring, and Human Review
A developer must provide deployers with instructions for the deployer's appropriate use, monitoring, and meaningful huma
CO-ADMT-6-1-1702-05
Transparency
Provide Information Necessary for Deployer Compliance
A developer must provide deployers with information reasonably necessary for the deployer to comply with Section 6-1-170
CO-ADMT-6-1-1702-06
Transparency
Notify Deployer of Withheld Information
If a developer withholds information otherwise required under subsection (1), the developer must notify the deployer tha
CO-ADMT-6-1-1702-07
Reporting
Provide Notice of Material Updates and Modifications
A developer must provide each deployer of a covered ADMT with notice of material updates, intentional and substantial mo
CO-ADMT-6-1-1702-08
Reporting
Provide Direct Notice When Using Public Release Notes
If a developer uses public release notes to satisfy the notice-of-material-updates requirement, the developer must provi
CO-ADMT-6-1-1702-09
Documentation
Retain Compliance Records for Three Years
A developer must retain, for not less than three years after creation (or longer if required by other law), records reas
Article 6-1-1703. Deployer record keeping.
2 obligations
CO-ADMT-6-1-1703-01
Documentation
Deployer Retention of Compliance Records
A deployer must retain records reasonably necessary to demonstrate compliance with Part 17 (the Colorado Automated Decis
CO-ADMT-6-1-1703-02
Documentation
Scope of Records to be Retained
The records retained by a deployer to demonstrate compliance may include, as applicable, covered ADMT version identifier
Article 6-1-1704. Deployer disclosures - point-of-interaction notice -
10 obligations
CO-ADMT-6-1-1704-01
Transparency
Pre-Use Notice of Covered ADMT to Consumer
Prior to using a covered ADMT to materially influence a consequential decision, the deployer must provide a clear and co
CO-ADMT-6-1-1704-02
Transparency
Public Posting as Compliance Method for Pre-Use Notice
A deployer may satisfy the pre-use notice requirement in subsection (1) by maintaining a prominent public notice that is
CO-ADMT-6-1-1704-03
Transparency
Post-Adverse Outcome Disclosure: Description of Decision and ADMT Role
If a deployer uses a covered ADMT to materially influence a consequential decision resulting in an adverse outcome for a
CO-ADMT-6-1-1704-04
Transparency
Post-Adverse Outcome Disclosure: Instructions to Request Additional Information
Within thirty days of an adverse outcome decision involving a covered ADMT, the deployer must provide instructions and a
CO-ADMT-6-1-1704-05
Transparency
Post-Adverse Outcome Disclosure: Explanation of Consumer Rights
Within thirty days of an adverse outcome decision involving a covered ADMT, the deployer must provide an explanation of
CO-ADMT-6-1-1704-06
Transparency
Notify Consumer When Withholding Trade Secret Information
If a deployer withholds information from disclosure under this section because it constitutes a trade secret or is other
CO-ADMT-6-1-1704-07
Requirement
Accessible Notices for Consumers with Disabilities and Limited English Proficiency
A deployer or developer must provide all notices and disclosures required by this part 17 in a manner that is reasonably
CO-ADMT-6-1-1704-08
Requirement
Attorney General Rulemaking on Post-Adverse Outcome Disclosures
The Attorney General shall adopt rules on or before January 1, 2027, to clarify and implement the post-adverse outcome d
CO-ADMT-6-1-1704-09
Requirement
Creditor Alternative Compliance via ECOA/FCRA Notices
A creditor required to provide notice under the federal Equal Credit Opportunity Act (and, when applicable, the Fair Cre
CO-ADMT-6-1-1704-10
Requirement
FERPA-Compliant Deployer Alternative Notice Process for Education Decisions
For consequential decisions relating to education, a deployer subject to FERPA satisfies this section's notice and discl
Article 6-1-1705. Consumer rights - correction - human review and
4 obligations
CO-ADMT-6-1-1705-01
Requirement
Provide Personal Data Correction Instructions After Adverse ADMT Decision
When a consumer experiences an adverse outcome resulting from a consequential decision materially influenced by a covere
CO-ADMT-6-1-1705-02
Human Oversight
Provide Opportunity for Human Review and Reconsideration
When a consumer experiences an adverse outcome resulting from a consequential decision materially influenced by a covere
CO-ADMT-6-1-1705-03
Requirement
Correction Right Overrides Certain Statutory Exceptions
For purposes of the correction and human review rights under subsection (1), the deployer must not apply the consumer de
CO-ADMT-6-1-1705-04
Requirement
FERPA-Compliant Education Deployers May Use Existing Student Record Processes
For consequential decisions relating to education, a deployer subject to FERPA may satisfy the correction and human revi