Colorado replaced its delayed comprehensive AI act with the Algorithmic Decision-Making Technology Act (ADMTA, SB 25B-004) — and the compliance date that matters is 1 January 2027.
Who is bound
ADMTA's duties fall on deployers — companies that use algorithmic decision-making technology — not only on the vendors that build it. If you operate in Colorado and an algorithmic system materially influences a decision about a consumer, you are the obligated party. That is a much wider net than "AI companies."
What it requires
The core mechanics: consumer notice when an algorithmic decision technology is in play, deployer duties around high-impact decisions, and record-keeping that demonstrates the process. The practical reading for operators: the notice obligation arrives first and is the cheapest to get wrong — it is a templated disclosure, and regulators can check for it from outside your building.
Why Colorado matters beyond Colorado
US states introduced more than 1,100 AI bills in the 2025 sessions. Colorado is the first comprehensive deployer-duty regime to reach a hard date, which makes it the template other states copy and the one enforcement watchers read for signals. A notice-and-records design that satisfies ADMTA covers most of what the state patchwork is converging on.
What an operator does now
Map where algorithmic tools touch consumer decisions, draft the consumer notice before the holiday freeze, and set the records retention policy (three years is the benchmark regulators keep choosing). The notice is a week of work in July; it is a scramble in December.
Independent regulatory intelligence — not legal advice. Matters with material exposure warrant counsel. Dates tracked on The Clock Board.