Colorado SB 24-205. 8 Documents. June 30, 2026.
SB 24-205 requires 8 documents from every deployer. These are them — built from C.R.S. § 6-1-1701 et seq., not a law firm's summary, not an AI-generated overview.
Does This Apply to You?
- You deploy AI systems that affect Colorado consumers
- The AI makes consequential decisions in employment, education, financial services, housing, insurance, or legal services
- You are a deployer (you use the AI to make decisions) — developers who supply high-risk AI to others also have separate obligations
Any deployer of a high-risk AI system that makes consequential decisions about Colorado consumers in employment, education, financial services, housing, insurance, or legal services.
The June 30, 2026 deadline applies to all three. Limited small-deployer exception under § 6-1-1703(6) for deployers under 50 employees that don't train the system; most deployers covered. The Attorney General can bring enforcement actions before rulemaking is complete.
What's Included (8 Documents)
Risk Management Policy
Your organization's formal policy for identifying and managing AI risks. The foundation everything else builds on.
Impact Assessment
Consumer Notification Template
Consumer Disclosure Statement
Algorithmic Discrimination Prevention Plan
Human Oversight Protocol
Documentation showing that a human reviews AI-driven decisions — not just approves them automatically.
Compliance Checklist
Every step you need to take, in order, so nothing gets missed.
Affirmative Defense Documentation
What you’re exposed to without these documents
Colorado SB 24-205 violations are enforced as deceptive trade practices under the Colorado Consumer Protection Act. The Attorney General has exclusive authority.
Civil penalties: up to $20,000 per violation. For consumers age 60 or older, up to $50,000 per violation.
If each affected consumer is treated as a separate violation — the standard CCPA enforcement posture in deceptive trade practice actions — exposure scales accordingly. The Colorado AG's exclusive enforcement authority extends to all CCPA remedies.
Limited small-deployer exception under § 6-1-1703(6) for deployers under 50 employees that don't train the system; most deployers covered. No private right of action — AG-only. No rulemaking required before enforcement begins.
Also Required If You Operate in These States
These laws are already in effect — no deadline to wait for.
Illinois HB3773
In Effect Since Jan 1, 2026
Employers using AI in hiring or HR
Up to $70,000/violation
Get Documents →In EffectNYC Local Law 144
DCWP Enforcement Active Since July 2023
Employers using AI in hiring or promotion (NYC Admin. Code §§ 20-870 to 20-874)
Up to $1,500/violation; each day = separate violation
Get Documents →In EffectTexas TRAIGA
In Effect Since Jan 1, 2026
AI developers + deployers
$10K–$200K/viol (uncurable max)
Get Documents →Preview Your Documents
See what your compliance package includes — sample shown with example data
See Inside Your Documents
Sample page using demo data. Your documents will include your company name, AI systems, and compliance details.
All documents include electronic signature blocks compliant with the ESIGN Act (15 U.S.C. § 7001) and UETA.
What Happens After You Purchase
Your documents generate instantly as fillable PDFs, packaged in a single zip file.
Download directly to your device or email to up to 3 team members.
Fill in the highlighted form fields with your company-specific information. Each document includes clear instructions.
Sign using the electronic signature blocks — ESIGN Act compliant, no printing required.
Have your legal team review the completed documents before deployment.
Complete Your Compliance
Law-specific add-ons for this package
CO Appeal & Correction Kit
AvailableWhen a Colorado consumer receives an adverse AI decision and wants to appeal — or needs to correct their data — you need a documented process ready. This kit covers the appeal intake, data correction, and outcome letters required by SB 24-205.
3 documents
$99
CO AG Reporting Kit
AvailableIf you discover your high-risk AI system has caused algorithmic discrimination, Colorado law gives you 90 days to report it to the Attorney General. This kit covers the deployer obligation only — the trigger is actual harm caused. Note: developers have a slightly broader trigger under §6-1-1702(5): reporting applies when discrimination "has caused or is reasonably likely to have caused" harm, not just after confirmed harm. This kit gives you the discovery form, AG notification letter, and corrective action plan so you're not scrambling when it happens.
3 documents
$129
CO Dev-Deploy Exchange Kit
AvailableColorado's law requires AI developers to provide specific documentation to deployers — including model cards, dataset cards, and impact assessment artifacts. This kit standardizes that exchange with checklists, gap analysis, and contract language.
3 documents
$109
Statutory Authority
Citation: C.R.S. § 6-1-1701 et seq.
View official source(opens in new tab)June 30, 2026 deadline
Complete Package
$449
One-time purchase. Instant download.
- 8 customized documents
- Instant digital download
- Based on C.R.S. § 6-1-1701 et seq.
- Secure checkout via Stripe
Purchase now, customize your documents after checkout
vs. thousands at a law firm
Verified against enacted statute text
Source: C.R.S. § 6-1-1701 et seq.Questions before purchasing? Email us
Customize Your Colorado SB 24-205 Package
Fill in your company details below. Your answers will be used to pre-fill your compliance documents.
Step 1 of 5
Company Information
You May Also Need
Strengthen your compliance program with related documentation.
NYC Local Law 144
If you hire in New York City and use any automated tool to screen or evaluate candidates, you need a...
Texas TDPSA
The Texas Data Privacy and Security Act requires data protection assessments for targeted advertisin...
Texas TRAIGA
Texas HB 149 — the Responsible AI Governance Act — took effect January 1, 2026 and applies to any bu...