Colorado State Government to Repeal 'SB 24-205' and Transition to Industry-Friendly AI Regulatory Framework

With the June 30, 2026, implementation deadline for the Colorado Artificial Intelligence Act (SB 24-205) just over a month away, the state legislature has begun legislative procedures to completely replace the bill. This move is a result of strong industry pushback and a recent court stay of enforcement, aiming to significantly scale back the existing strict AI audit requirements.

As of May 5, 2026, the Colorado State Legislature is moving urgently to scrap the existing AI law and introduce a new regulatory framework before the end of the regular session. While maintaining the core value of consumer protection, the state government is adjusting the scope of the bill to address the excessive regulatory cost concerns raised by businesses.

According to reports on May 4, 2026, the new bill aims to ease industry pressure while preserving safeguards for consumers. Lawmakers are emphasizing swift legislative processing to prevent confusion for companies as the implementation of the existing bill looms.

The broad regulations of the existing SB 24-205 risk hindering innovation, and more specific and actionable standards are needed.

Enacted on May 17, 2024, SB 24-205 was evaluated as one of the most leading AI regulation laws in the U.S., but at the same time, it became the center of controversy due to its overly comprehensive definitions and compliance obligations. In particular, the mandatory bias audits and impact assessments have been pointed out as "poison pill" provisions that impose a massive cost burden on small businesses and developers.

Key Changes in the New Regulatory Framework

A working group appointed by the Governor proposed a new draft to replace the existing bill on March 17, 2026. This proposal aims to resolve legal uncertainty by limiting the scope of regulation to 'Automated Decision-Making Technology (ADMT)' and includes the removal of some provisions that businesses were most concerned about.

• Narrowing the scope of regulation from broad AI systems to Automated Decision-Making Technology (ADMT)
• Repeal of mandatory impact assessments and risk management requirements
• Reduction of corporate compliance costs by removing the obligation for bias audits
• Maintenance of obligations for consumer notification, disclosure of adverse results, and human review

Judicial decisions also played a role in these legislative changes. On April 27, 2026, a Colorado magistrate judge issued an order prohibiting the State Attorney General from enforcing the AI Act until final rulemaking is completed. Accordingly, the Attorney General has temporarily suspended the rulemaking process in consideration of the possibility of new legislation.

Legal experts, such as those at Snell & Wilmer, analyze that this replacement bill will drastically reduce the burden on developers and deployers. Instead of the harsh level of auditing required by the previous bill, the focus is expected to shift toward building autonomous defense systems using existing standards such as the NIST AI Risk Management Framework (RMF).

While the tech industry welcomes this move toward deregulation, consumer groups are concerned that safeguards will be weakened. The state government is encouraging voluntary compliance with safety standards by granting "affirmative defense" opportunities to companies that comply with international standards such as the NIST AI RMF or ISO/IEC 42001.

Implementation Schedule Postponed to January 2027

If this replacement bill passes, the effective date of the law will be postponed by about six months, from the original June 30, 2026, to January 1, 2027. This provides companies with an additional grace period to adapt to the new regulatory environment and is expected to buy time for the state government to prepare more sophisticated detailed rules.

The legislative process must be closely monitored until the last day of the 2026 regular session. If the processing of the replacement bill fails, companies will once again face a situation where they must complete compliance preparations by the end of June in accordance with the strict standards of the existing SB 24-205. Therefore, employers and technology developers must prepare scenario-specific countermeasures based on the final legislative outcome.