Colorado AI Act

The Colorado AI Act (SB21-169) regulates automated decision systems used in consequential decisions affecting Colorado residents.

Overview

Aspect
Details

Effective Date

February 1, 2024

Scope

Consequential decisions in insurance

Regulator

Colorado Division of Insurance

Penalties

Per-violation fines, license revocation

Key Requirements

§ 6-1-1303: Impact Assessments

"A deployer shall complete an impact assessment for each high-risk AI system"

Requirements:

  • Annual impact assessments

  • Risk identification

  • Mitigation documentation

ATHENA Solution:

  • Trend analysis over time

  • Risk scoring

  • Automated report generation

§ 6-1-1304: Consumer Notification

"A deployer shall provide notice to a consumer... that an AI system was used"

ATHENA Solution:

  • Decision logging with notification tracking

  • Audit trail for compliance proof

§ 6-1-1306: Bias Testing

"A deployer shall test for unfair discrimination"

ATHENA Solution:

  • Continuous bias detection

  • Subgroup performance analysis

  • Disparity alerts

Impact Assessment Contents

1. System Description

  • Purpose of AI system

  • Decision types made

  • Data inputs used

2. Risk Analysis

  • Identified risks to consumers

  • Potential for discrimination

  • Harm severity assessment

3. Performance Metrics

  • Accuracy by subgroup

  • Bias detection results

  • Trust calibration scores

4. Mitigation Measures

  • Controls implemented

  • Monitoring procedures

  • Remediation actions

5. Trend Analysis

  • Year-over-year comparison

  • Improvement tracking

  • Persistent issues

Implementation

Step 1: Log All Decisions

Step 2: Track Subgroups

Step 4: Generate Annual Report

Annual Assessment Schedule

Year
Due Date

2024

January 31, 2025

2025

January 31, 2026

2026

January 31, 2027

Consumer Rights

Colorado residents have the right to:

Right
ATHENA Support

Know AI was used

Decision logging

Explanation of decision

Audit trail with context

Appeal adverse decisions

Decision history

Opt-out (where applicable)

Tracking metadata

Sample Impact Assessment


Next: FDA AI/ML Guidelines

Last updated