Colorado Replaced Its AI Act: What Professional Services Firms Do Before January 1, 2027
Published: May 13, 2026 | By: The Crossing Report
Colorado Replaced Its AI Act: What Professional Services Firms Do Before January 1, 2027
The Colorado General Assembly adjourned May 13 and took the June 30 compliance deadline with it. SB26-189 — the ADMT replacement framework — passed before session ended, replacing SB 24-205 and resetting the compliance clock to January 1, 2027.
If you've been preparing for June 30, that work wasn't wasted. Most of it transfers directly to the new framework. But there are meaningful differences — and one important piece of good news if you run a law firm.
Here's what happened and what you need to do before the new deadline.
What Just Happened: SB26-189 Passed
SB26-189, the Artificial Decision-Making Technology Act (ADMT), passed the Colorado General Assembly before the May 13 adjournment. The bill replaces Colorado's original AI Act (SB 24-205), which was signed by Governor Polis in May 2024 with a June 30, 2026 compliance deadline.
The Senate passed SB26-189 on May 7, 2026 — 34 Aye, 1 No. The House passed the bill 57-6 on May 9, 2026. Governor Polis signed the bill into law on May 14, 2026.
The law takes effect August 12, 2026 (90 days after the May 13 session end, standard Colorado enactment). Developer and deployer compliance requirements begin January 1, 2027. Full enforcement with civil penalties under the Colorado Consumer Protection Act begins January 1, 2030 — a three-year right-to-cure window. The June 30, 2026 deadline under SB 24-205 is no longer operative.
This outcome was the subject of significant legislative effort following the March 17, 2026 Colorado AI Policy Work Group recommendation. The ADMT framework was introduced as SB26-189 on May 1, 2026 — just 12 days before the legislature adjourned.
What This Means for Law Firms
Law firms come out of this the best of any professional services category.
Legal services decisions were explicitly excluded from the ADMT framework's scope of covered "consequential decisions." Under SB 24-205, law firms using AI to inform consequential legal decisions (research, case strategy, document review) were covered deployers. Under ADMT, that coverage ends.
What this means in practice:
- AI used in legal services work is no longer in scope for Colorado's AI compliance framework
- Law firms do not need to build out consumer disclosure language for AI use in client legal matters
- The formal AI tool compliance obligations drop for most legal services work
Important caveat: Review the actual enacted bill language, not summaries. "Legal services decisions" has a specific definition in the statute. AI used in HR decisions (hiring, performance) at law firms may still be covered regardless of the legal services carve-out.
ABA ethical obligations around AI use in legal work remain unchanged. Colorado's scope exemption doesn't affect your professional responsibility obligations under Rule 1.1 (competence) or Rule 5.3 (supervision of non-lawyers).
What This Means for Accounting and Consulting Firms
Accounting and consulting firms get the deadline extension but not the scope relief.
Financial decision AI — risk scoring, tax preparation AI, financial analysis tools, client portfolio recommendations — remains in scope under ADMT. The core coverage zone for accounting and consulting work didn't change.
What changed for your firm:
- New deadline: January 1, 2027. The June 30 pressure is gone. You now have roughly seven months.
- Lighter documentation requirements. ADMT eliminates the mandatory bias audit, NIST AI Risk Management Framework alignment, and formal impact assessments that SB 24-205 required. The three-document portable minimum is now the full compliance posture, not a minimum.
- Small business exemption. Confirm whether the SB 24-205 small business deployer exemption (under 50 employees) carries forward with similar parameters under ADMT. The Work Group's March proposal preserved it — verify the enacted language.
If your firm built the three-document baseline (AI tool inventory, vendor disclosure statements, client engagement letter language) in preparation for June 30, you're ahead of the January 2027 deadline, not scrambling at the last minute.
What the Court Stay Means Now
The federal court stay from xAI's lawsuit (April 28, Judge Cyrus Chung) was blocking enforcement of SB 24-205. With SB 24-205 now superseded by ADMT, the original lawsuit's target no longer exists in its prior form.
xAI's legal team may continue challenging ADMT — the transparency-and-notice framework still has potential constitutional arguments around compelled disclosure — or they may withdraw the case as moot. Watch for filings in the coming weeks.
For your compliance planning: the court case is now secondary. The legislative replacement is the operative change. January 1, 2027 is your compliance deadline — and the three-year right-to-cure window means civil penalties don't begin until January 1, 2030.
The Three-Document Baseline: Your January 2027 Prep
The portable minimum compliance baseline remains valid under ADMT and is now your complete compliance posture (not just the minimum):
Document 1: AI Tool Inventory A list of every AI tool your firm uses, what decisions it informs, what data it processes, and which staff use it. This is the foundation of ADMT transparency obligations.
Document 2: Vendor Disclosure Statements Written statements from AI vendors about intended use, known limitations, and data handling. Most major vendors (Microsoft, Intuit, Thomson Reuters, Clio, etc.) publish these. Collect and file them. Review them annually.
Document 3: Client Disclosure Language Engagement letter language informing clients when AI materially informs a decision affecting them. Two paragraphs in your standard agreement is sufficient for most small firm contexts.
With the January 2027 deadline, you have time to do this right instead of rushing. Don't wait. The firms that treat July as "we have plenty of time" will be scrambling in December.
What to Watch Next
- Governor's signature: Governor Polis signed SB26-189 on May 14, 2026 — one day after the legislature adjourned.
- Effective date — August 12, 2026: The law takes effect 90 days after the May 13 session end. No compliance obligations begin on that date — it is simply when the law is on the books.
- Implementation rulemaking: ADMT transparency requirements will involve Attorney General rulemaking. The AG must adopt disclosure rules by January 1, 2027. Watch for public comment periods over the summer.
- January 1, 2027 compliance deadline: That's your operative date. Start the three-document baseline now.
- January 1, 2030 full enforcement: Civil penalties under the Colorado Consumer Protection Act don't begin until 2030. The three-year right-to-cure window is built into the law.
The Colorado AI compliance picture stabilized significantly this week. The June 30 scramble is over — replaced by a reasonable runway. For professional services firms that have been anxious about Colorado, the outcome is as good as it realistically could have been.
Subscribe to The Crossing Report — we'll track the ADMT implementation rulemaking and update you when the January 2027 picture sharpens.
Related Reading
Frequently Asked Questions
Did Colorado pass SB26-189 (the ADMT replacement)?
Yes. The Colorado General Assembly passed SB26-189 before adjourning May 13, 2026. The bill replaces SB 24-205 (the original Colorado AI Act) with the ADMT transparency framework. The law takes effect August 12, 2026; developer and deployer compliance requirements begin January 1, 2027. Full enforcement with civil penalties under the Colorado Consumer Protection Act begins January 1, 2030.
Does Colorado's original June 30 AI compliance deadline still apply?
No. SB26-189 replaced SB 24-205. The June 30, 2026 deadline is no longer operative. Developer and deployer compliance requirements under the new ADMT framework begin January 1, 2027. Full enforcement with civil penalties does not begin until January 1, 2030 — a three-year right-to-cure window is built into the law.
Are law firms still covered under Colorado's AI law after the May 13 session end?
Likely not for most legal services work. The ADMT framework explicitly excluded legal services decisions from its scope of covered consequential decisions — a significant change from SB 24-205, which covered law firms using AI for client legal matters. Law firms should review the enacted bill language to confirm their situation. Important caveat: AI used in hiring or performance decisions at law firms may still fall under ADMT regardless of the legal services carve-out. ABA ethical obligations under Rules 1.1 and 5.3 are unaffected.
What is the ADMT and how is it different from Colorado's original AI law?
ADMT stands for Automated Decision-Making Technology Act — the replacement framework proposed by Colorado's AI Policy Work Group on March 17, 2026 and introduced as SB26-189 on May 1, 2026. Key differences from SB 24-205: (1) legal services explicitly excluded from covered decisions, (2) compliance requirements begin January 1, 2027 (replacing the June 30, 2026 deadline), (3) transparency-and-notice framework rather than risk management regime, (4) no mandatory bias audits, NIST alignment, or impact assessments, (5) three-year right-to-cure period — civil penalties under CCPA don't begin until January 1, 2030.
What should a 10-person accounting firm do after the May 13 Colorado AI law news?
Confirm whether your firm qualifies for the small business exemption under the new ADMT framework (under 50 employees using third-party AI tools without custom model training). Keep your three-document compliance baseline in place — it transfers directly to ADMT requirements. Your new operative deadline is January 1, 2027. If you built the baseline in preparation for June 30, you're already ahead of the curve.
Get the weekly briefing
AI adoption intelligence for accounting, law, and consulting firms. Free to start.
Related Reading
- Colorado SB26-189 Is Now Formally in the Legislature. Here's What Changes Before May 13.
- Colorado's AI Act Is Now Blocked in Court. Here's What That Changes for Your Firm.
- Colorado Is Replacing Its AI Law — But the June 30 Deadline Still Applies to Your Firm
- The Colorado AI Act Has a Small Business Exemption — Does Your Firm Qualify?
This is the kind of intelligence premium subscribers get every week.
Deep analysis, cross-sector patterns, and the frameworks that help professional services firms make the crossing.