Compliance Stuff

On May 14, 2026, Colorado Governor Jared Polis signed into law a compromise bill that replaces the state’s landmark AI statute, the Colorado AI Act, SB 24-205. The Colorado legislature acted in response to widespread industry objections to SB 24-205 as overly burdensome and following a US District Court of Colorado order suspending enforcement of the statute for the foreseeable future. 1 The new automated decision-making technologies (ADMT) law, SB 26-189, 2 takes a fundamentally different approach to AI regulation, trading comprehensive algorithmic discrimination protections for a leaner, less burdensome documentation-and-disclosure framework. If you have been preparing for the June 2026 compliance deadline for SB 24-205, the new ADMT law is a significant course correction. Here is what has changed: The effective date has been pushed to January 1, 2027. Deployers are no longer required to implement risk management frameworks or conduct AI impact assessments. The Colorado Attorney Ge...

Our AI, Data, and Analytics thought leaders have pulled together their top predictions for the new year so that employers can get a running start to 2026. If you want more,  register for our FP Forecast 2026 Webinar here . Colorado and Virginia Will Take Different Regulatory Paths Colorado’s landmark AI law  will not take effect in 2026, as legislators, regulators, and stakeholders delay things to renegotiate. But Virginia will take another crack at AI lawmaking, this time aiming to  regulate healthcare  transparency and exposure. California’s ADMT Regulations Will Make AI Governance a National Standard Gearing up for  CPPA regulations to take effect in 2027 , businesses will need to grapple with risk assessments, cybersecurity audits, pre-use notices, opt-out rights, and annual cybersecurity audits in 2026. And most multistate businesses will choose to comply with this stringent standard by  adopting an AI governance program  as table stakes. Bias Aud...