The June 30, 2026 enforcement deadline for what would have been the first U.S. state AI law is effectively dead. Colorado Governor Jared Polis signed SB 26-189 on May 9, superseding the original Colorado AI Act and resetting both the rules and the timeline.
The new law narrows the scope significantly. Where the original act covered any system that played a meaningful role in a high-risk decision, SB 26-189 focuses on whether automated technology processes personal data to materially shape the outcome. How the Attorney General defines this standard through rulemaking will determine how many real-world tools like resume screeners, credit models, and tenant-scoring systems fall inside the law.
Consumer protections are preserved under the new framework: disclosure, explanation, correction, and a right to request meaningful human review of consequential automated decisions all remain, effective January 1, 2027.
The rewrite reflects a deliberate pivot away from the EU-style regulatory model. The new enforcement timeline is contingent on the Attorney General completing rulemaking, giving both regulators and industry more time to define how the law applies in practice. For AI developers and deployers serving Colorado residents, the immediate compliance pressure has eased, but preparation for 2027 should begin now.