AIMSS §4.3
Risk classification & impact assessment
Governance
✓
Full
Annual impact assessment required for high-risk AI.
§6-1-1703
← All regulations
Colorado, USA · Effective Jun 30, 2026 (delayed by SB 25B-004)
Colorado SB 24-205 — Consumer Protections for Artificial Intelligence
Scope
Use of high-risk AI systems that make or are a substantial factor in making consequential decisions about Colorado residents.
Who must comply
Developers and deployers of high-risk AI systems affecting Colorado consumers.
AIMSS coverage
43%
Weighted overlap with this regulation
Fully covered clauses7
Partial coverage9
Not addressed here11
Clause map
AIMSS clauses that satisfy Colorado AI Act.
AIMSS §4.4
Third-party & supply-chain AI obligations
Governance
✓
Full
Developers must disclose to deployers all info needed for impact assessments.
§6-1-1702(2)
AIMSS §5.3
Explainability of automated decisions
Ethics
✓
Full
Plain-language explanation of the decision must be provided on request.
§6-1-1704(3)(b)
AIMSS §5.4
Disclosure to affected persons
Ethics
✓
Full
Consumer notice required before consequential decision.
§6-1-1704
AIMSS §8.1
Bias & disparate-impact testing
Society
✓
Full
Algorithmic discrimination duty of reasonable care.
§6-1-1702
AIMSS §9.1
Post-market monitoring & incident reporting
Lifecycle
✓
Full
Deployers must monitor and report algorithmic discrimination within 90 days.
AIMSS §9.4
Audit trail & technical documentation
Lifecycle
✓
Full
Impact assessments must be retained and available to the Attorney General.
AIMSS §10.1
Continuous integrity programme
Governance
◐
Partial
Annual impact assessment review required.
AIMSS §10.2
External assurance & independent re-audit
Governance
◐
Partial
Attorney General oversight; no mandatory third-party audit.
AIMSS §4.1
AI inventory & system register
Governance
◐
Partial
Deployers must document high-risk systems used; no public register.
AIMSS §4.2
Documented AI policy & accountable executive
Governance
◐
Partial
Risk-management programme required for deployers of high-risk AI.
§6-1-1703(2)
AIMSS §5.1
Independent ethics review
Ethics
◐
Partial
Reasonable care duty; no independent ethics body.
AIMSS §5.2
Human oversight & meaningful intervention
Ethics
◐
Partial
Consumer right to human review of consequential decisions.
§6-1-1704(3)
AIMSS §8.2
Demographic-data governance for fairness testing
Society
◐
Partial
Impact assessment must describe data used and limitations.
AIMSS §9.2
Cybersecurity & adversarial robustness
Lifecycle
◐
Partial
Reasonable-care duty includes safeguarding against discrimination risk.
AIMSS §9.3
Public complaints register
Lifecycle
◐
Partial
Consumer right to appeal a consequential decision.
AIMSS goes further
11 additional AIMSS clauses go beyond what Colorado AI Act requires.
- AIMSS §6.2Training & inference emissions accountingClimate
- AIMSS §6.4Emissions reduction targetsClimate
- AIMSS §7.1Data-worker labour conditionsLabour
- AIMSS §7.3Red-team psychological safeguardsLabour
- AIMSS §8.4Misuse & dual-use assessmentSociety
- AIMSS §6.1Water & cooling impact disclosureClimate
- AIMSS §6.3Lifecycle carbon disclosure to buyersClimate
- AIMSS §7.2Pay-floor & overtime limits for data workersLabour
- AIMSS §7.4Workforce displacement notice & re-skillingLabour
- AIMSS §8.3Accessibility for users with disabilitiesSociety
- AIMSS §8.5Content provenance & synthetic-media labellingSociety