Colorado AI Act
The Colorado AI Act (SB21-169) regulates automated decision systems used in consequential decisions affecting Colorado residents.
Overview
Effective Date
February 1, 2024
Scope
Consequential decisions in insurance
Regulator
Colorado Division of Insurance
Penalties
Per-violation fines, license revocation
Key Requirements
§ 6-1-1303: Impact Assessments
"A deployer shall complete an impact assessment for each high-risk AI system"
Requirements:
Annual impact assessments
Risk identification
Mitigation documentation
ATHENA Solution:
Trend analysis over time
Risk scoring
Automated report generation
§ 6-1-1304: Consumer Notification
"A deployer shall provide notice to a consumer... that an AI system was used"
ATHENA Solution:
Decision logging with notification tracking
Audit trail for compliance proof
§ 6-1-1306: Bias Testing
"A deployer shall test for unfair discrimination"
ATHENA Solution:
Continuous bias detection
Subgroup performance analysis
Disparity alerts
Impact Assessment Contents
1. System Description
Purpose of AI system
Decision types made
Data inputs used
2. Risk Analysis
Identified risks to consumers
Potential for discrimination
Harm severity assessment
3. Performance Metrics
Accuracy by subgroup
Bias detection results
Trust calibration scores
4. Mitigation Measures
Controls implemented
Monitoring procedures
Remediation actions
5. Trend Analysis
Year-over-year comparison
Improvement tracking
Persistent issues
Implementation
Step 1: Log All Decisions
Step 2: Track Subgroups
Step 3: Monitor Trends
Step 4: Generate Annual Report
Annual Assessment Schedule
2024
January 31, 2025
2025
January 31, 2026
2026
January 31, 2027
Consumer Rights
Colorado residents have the right to:
Know AI was used
Decision logging
Explanation of decision
Audit trail with context
Appeal adverse decisions
Decision history
Opt-out (where applicable)
Tracking metadata
Sample Impact Assessment
Next: FDA AI/ML Guidelines
Last updated