Is the Colorado AI Act in Effect? The July 2026 Status Check for Businesses

As of June 30, 2026, the original Colorado AI Act — SB 24-205, the 2024 law everyone spent two years arguing about — is officially on the books. And almost nothing happened, because enforcement is paused by a federal court order while its replacement waits in the wings. Here is the honest July 2026 status check: what is technically in effect, what is actually being enforced, and what a Colorado business should do about the gap.

The short answer

Yes, the Colorado AI Act is technically in effect. No, it is not being enforced right now. And no, that is not a reason to ignore it — because the law that will be enforced, SB 26-189, arrives on January 1, 2027, and the habits it requires take longer than a holiday weekend to build.

What actually happened on June 30

SB 24-205 — the Consumer Protections for Artificial Intelligence Act, passed back in 2024 — was originally supposed to take effect February 1, 2026. An August 2025 special session pushed that to June 30, 2026. Then, in May 2026, the legislature passed SB 26-189, a full repeal-and-replace — but wrote both the new framework and the repeal to take effect January 1, 2027, and did not cancel the June 30 date.

The result is a six-month interim window, June 30 through December 31, 2026, in which the oldact is the statute on Colorado's books. That is the window we are in right now.

Why nobody is being enforced against

In April 2026, xAI sued the Colorado Attorney General in federal court (xAI v. Weiser, D. Colo.), arguing the act is unconstitutional, and the U.S. Department of Justice intervened on xAI's side. Before the effective date ever arrived, the parties agreed — and the court ordered — that the state will not enforce or investigate under the act while xAI's challenge is pending. The order even protects alleged violations occurring up to fourteen days after the court eventually rules on a preliminary injunction, and the state has said the pause extends to any legislation replacing or amending SB 24-205.

So the practical picture in July 2026: a law is in effect, and the only entity with authority to enforce it — the Attorney General has exclusive enforcement power; there is no private right of action — has agreed in court not to.

One trap worth knowing about the old act

The interim statute is broader in at least one way that matters: SB 24-205 lists legal servicesas a consequential-decision category, alongside employment, housing, lending, insurance, healthcare, education, and government services. SB 26-189 drops legal services from the list. So for the rest of 2026, the law on the books technically reaches more industries than the law that takes over in January. With enforcement paused this is mostly a paper distinction — but it is why “which version are we talking about?” is always the first question when someone tells you what the Colorado AI Act requires.

What governs from January 1, 2027

SB 26-189 — the Automated Decision-Making Technology Act — repeals the old law and applies to consequential decisions made on or after January 1, 2027. If your business deploys covered ADMT (AI that materially influences a consequential decision about a person in education, employment, housing, lending or financial services, insurance, healthcare, or essential government services), you owe five things:

• A clear and conspicuous pre-use notice telling people AI is involved in the decision, before it is used.
• A 30-day adverse-outcome notice when the technology contributes to a decision that goes against someone.
• Meaningful human review of adverse outcomes, where commercially reasonable.
• Data access and correction — a way for consumers to see and fix the personal data the system used.
• Three years of records documenting the above.

The Attorney General enforces exclusively, with a 60-day cure period for most violations (that grace period sunsets January 1, 2030). For the full plain-language walkthrough, see our guide to the Colorado AI Act and the story of how the rewrite happened.

What to actually do during the pause

• Find out if you are covered. Most small businesses are not deployers of covered ADMT; some are without realizing it — usually through hiring software. The free AI Act readiness checker answers this in a few minutes.
• Build to the 2027 law, not the paused one. The five duties above are the compliance target worth investing in. If you use AI in hiring, start with our breakdown of AI hiring tools under Colorado law.
• Weigh in on the rules while you still can. The Attorney General opened public comment on the implementing rules on June 23, and the window closes July 13. Here is how to submit a comment that matters.
• Watch the case. If xAI v. Weiser resolves, the interim posture changes on short notice. (We watch it so our clients do not have to.)

Frequently asked questions

Is the Colorado AI Act in effect right now?

Technically yes — the original act (SB 24-205) took effect June 30, 2026. But enforcement is suspended by a federal court order in xAI v. Weiser, and the act will be repealed and replaced by SB 26-189 on January 1, 2027.

Can my business be fined under the Colorado AI Act in 2026?

Not while the enforcement pause holds. The Attorney General — the only party who can enforce the act — has agreed in court not to enforce or investigate while xAI's constitutional challenge is pending, with a 14-day protective buffer after the court rules. There is no private right of action.

Should I just wait until 2027 to think about this?

No. The SB 26-189 duties — pre-use notice, adverse-outcome notice, human review, data access, and recordkeeping — apply to decisions made on or after January 1, 2027, and they require an inventory, vendor conversations, and process changes that take months, not days. The pause is preparation time.

What is the difference between SB 24-205 and SB 26-189?

SB 24-205 (2024) was a broad algorithmic-discrimination law with risk management, impact assessment, and bias-audit style duties. SB 26-189 (2026) replaces it with a narrower disclosure-and-human-review framework aimed at automated decision-making technology, drops the legal-services category, and takes effect January 1, 2027.

The bottom line

June 30 came and went without sirens because the courts froze the old law before it could bite. The date that should be on your calendar is January 1, 2027 — and the cheapest way to meet it is to start now, while the regulator is writing rules instead of writing citations.

Run the free AI Act readiness checker to see if you are covered, or put a Colorado attorney in your corner for a flat monthly rate.