AI Frontier Institute

AI Policy Tracker

Federal and state AI bills and executive actions — each sourced, status-dated, and summarized in plain English. Filter by jurisdiction, status, or impact area, or search by keyword.

• COEnacted

  Automated Decision-Making Technology in Consequential Decisions

  Enacted · status as of 2026-05-14

  Senate Bill 26-189, signed by Governor Polis on May 14, 2026 as Chapter 131, repealed Colorado's 2024 Artificial Intelligence Act and reenacted part 17 of article 1 of title 6 of the Colorado Revised Statutes in its place. Where the 2024 law regulated "high-risk artificial intelligence systems" through a duty of reasonable care against algorithmic discrimination, the replacement regulates "covered automated decision-making technology" — technology that processes personal data to materially influence a consequential decision — and is built on disclosure and consumer rights rather than risk management. A consequential decision is one relating to a consumer's access to, eligibility for, selection for or compensation in a covered domain: education enrollment or opportunity, employment, the lease or purchase of residential real estate in Colorado, financial or lending services, insurance including underwriting, pricing and claims adjudication, health-care services, and essential government services and public benefits including eligibility and renewal determinations. Low-stakes and routine decisions such as scheduling, classroom personalization and administrative routing are excluded. On and after January 1, 2027, a developer must give each deployer a general statement describing the intended and known harmful or inappropriate uses of the technology and a description of the categories of data, including personal data, used to train it. Before a deployer uses covered ADMT to materially influence a consequential decision it must give the consumer clear and conspicuous notice, and when a consumer experiences an adverse outcome the deployer must on request provide instructions for accessing and correcting inaccurate personal data and an opportunity for meaningful human review and reconsideration, to the extent commercially reasonable. The Attorney General enforces the part through the Colorado Consumer Protection Act as a deceptive trade practice, with a sixty-day right to cure that does not apply where a violation is knowing or repeated. The act creates no new private right of action. It took effect on passage under a safety clause and applies to consequential decisions made on or after January 1, 2027.

  • Workforce
  • Enterprise
  • AI policy

• COEnacted

  Use of Artificial Intelligence in Health Care

  Enacted · status as of 2026-06-02

  House Bill 26-1139 adds two new sections to the Colorado Revised Statutes — 10-16-112.7 (insurance) and 25.5-1-209 (Medicaid and the Children's Basic Health Plan) — to govern the use of artificial intelligence in health care utilization review and to restrict AI-delivered psychotherapy. Insurance carriers, pharmacy benefit managers, utilization review organizations, and behavioral health administrative services organizations that use AI to conduct utilization review must base determinations on the individual patient's own clinical history and circumstances rather than group data alone, avoid discriminatory application, maintain audit logs, and disclose to state regulators how and where AI is used in the review process. Most consequentially, a coverage denial based in whole or in part on medical necessity cannot be issued solely on an AI system's output — a licensed clinician, physician, or other qualified professional must review and approve the denial. Separately, the bill bars health insurance plans, Colorado Medicaid, and the Children's Basic Health Plan from paying for psychotherapy services conducted directly by an AI system, while explicitly permitting nontherapeutic tools — billing software, electronic health records, video platforms — used alongside a human provider. Governor Polis signed the bill June 2, 2026 as Chapter 325, Session Laws of Colorado, with its provisions taking effect January 1, 2027.

  • AI policy
  • Quality assurance
  • Enterprise

← Back to the dashboard