Colorado SB26-189 Is Now Formally in the Legislature. Here's What Changes Before May 13.

Something shifted on May 1, 2026 that our earlier coverage said hadn't happened yet: Colorado SB26-189 was formally introduced in the Colorado Senate. The bill that would delay and substantially lighten Colorado's AI compliance requirements is now officially in play.

Here are the facts as of May 2, 2026:

• SB26-189 introduced: May 1, 2026
• Colorado session ends: May 13, 2026
• Current law effective date if nothing passes: June 30, 2026 (under SB 24-205)
• New effective date if SB26-189 passes: January 1, 2027
• What changes for law firms: legal services removed from "consequential decisions" scope
• What doesn't change for staffing and accounting firms: you're still covered — under both versions

Our April 28 post told you to plan for both scenarios because the replacement bill hadn't been formally introduced yet. It now has. That changes the urgency and specifics — but not the core advice: build the compliance baseline now.

Here's what the bill actually says, who it helps, and what you need to do before May 13.

---

What SB26-189 Actually Says

The bill is designed to repeal and replace the original Colorado AI Act (SB 24-205). It makes five specific changes from current law:

1. Delays enforcement from June 30, 2026 → January 1, 2027
2. Removes the bias audit requirement — replaces it with a transparency-only regime (notify consumers; explain adverse decisions; offer human review)
3. Adds a 90-day cure period — first-time violations can be remedied before fines apply
4. Removes legal services from the definition of "consequential decisions" — meaning law firms are no longer covered
5. Clarifies deployer liability — firms using third-party AI tools bear less liability for problems inherent in the tool's design

Governor Polis has backed the replacement framework. The Colorado Sun reported on May 1 that the bill's approach is to "focus regulations on informing consumers when the technology is used" rather than requiring firms to prove their AI doesn't discriminate.

That's a meaningful shift in philosophy — from compliance-as-audit to compliance-as-disclosure.

---

What Doesn't Change: Notification and Recordkeeping Still Required

Even under the lighter SB26-189 regime, three obligations survive:

• Consumer notification when AI is used in consequential decisions (hiring, credit, housing decisions affecting Colorado residents)
• Post-adverse explanation — if AI contributes to a decision that goes against a client or applicant, they're entitled to an explanation and the option to appeal to a human reviewer
• Recordkeeping — documentation that AI tools are being used and in what decision contexts

This is not optional in either version of the law. The difference is that SB26-189 removes the requirement to affirmatively prove your AI doesn't produce discriminatory outcomes (the bias audit). But the disclosure and notification structure stays.

For most 5–30 person professional services firms, this is actually the majority of the compliance work. The audit requirement that might go away was never going to be something a small firm did lightly. The disclosure work — updating engagement letters, adding AI use language to your client communications — is what you need to do regardless.

---

Why Law Firms Get Different Treatment Under SB26-189

This is the most significant sector-specific change in the bill.

Under the current ADMT (SB 24-205), "legal services" is included in the definition of consequential decisions. That means a law firm using AI to assist with client intake, matter classification, or legal analysis — even through a third-party tool — is a deployer under the law and subject to its requirements.

SB26-189 explicitly removes legal services from the consequential decisions scope.

If the bill passes, law firms are not covered by the new Colorado AI compliance framework. Full stop.

If the bill doesn't pass, law firms are covered by the original ADMT starting June 30.

The practical implication: law firms cannot stand down yet. You have 11 days to find out whether the exemption holds. In the meantime, the minimum viable compliance posture — knowing which AI tools you're using and having client-facing language about it — takes a few hours and protects you if the bill fails.

Don't bank on the exemption until the session closes with a signed bill.

---

The May 13 Deadline: Three Scenarios for Your Firm

The Colorado General Assembly session ends May 13. Here is what each outcome means:

Scenario 1: SB26-189 passes before May 13

The June 30 deadline is gone. The new effective date is January 1, 2027. The bias audit requirement is removed. Law firms are exempt from the consequential decisions framework. The compliance work your firm needs to do is: AI tool inventory, client disclosure language, and recordkeeping — lighter than the original law. You have until January 1, 2027 to have it in place.

Scenario 2: SB26-189 fails or stalls

The original ADMT (SB 24-205) is live law on June 30, 2026. No extension. No grace period. Disclosure, recordkeeping, and algorithmic impact assessments are all required. Law firms are covered. Staffing firms using AI in hiring workflows are covered. Accounting firms using AI in financial advisory for Colorado clients are covered.

Scenario 3: SB26-189 passes with amendments

The bill could be narrowed on the floor — for example, the law firm exemption might be stripped out, or the cure period might be tightened. Watch for floor amendments if you're closely monitoring this. A partial pass could change which sectors benefit.

The base planning assumption: build the compliance work that's required under both bills. The only piece conditional on Scenario 1 is the bias audit. Everything else — disclosure, recordkeeping — is required regardless.

---

What to Do Right Now (Whether or Not It Passes)

Three things. In this order.

1. Inventory your AI tools and the decisions they touch.

Walk through every AI tool your firm uses. For each one, ask: does this touch decisions about Colorado clients or Colorado employees? The key decision categories: hiring, financial recommendations, legal matter outcomes, housing or credit decisions.

Write it down. A simple list — tool name, what decision it influences, which population is affected — is sufficient. This document is your starting compliance record and your impact assessment skeleton if Scenario 2 plays out.

For most small professional services firms, this takes 2–4 hours. Do it this week.

2. Add AI disclosure language to your engagement letter.

One paragraph. Something like: "Our firm uses AI-assisted tools in service delivery. When you interact with automated systems, you'll be identified as such. We remain responsible for all work product regardless of AI assistance."

That language satisfies the disclosure requirement under both SB 24-205 and SB26-189. It also protects you from the compliance gap on any Colorado client you onboard between now and the session end on May 13.

3. Get your AI vendor documentation.

If you're using a third-party AI tool — a hiring platform, a research assistant, an accounting AI — pull the vendor's policy documentation on how their system handles decisions about individuals. Most major platforms publish this. Having it on file demonstrates reasonable deployer diligence under both versions of the law.

These three steps together take a day of staff time for most small firms. They protect you in every scenario.

---

Frequently Asked Questions

What is Colorado SB26-189?

Colorado SB26-189 is a bill formally introduced in the Colorado Senate on May 1, 2026. It would repeal and replace the original Colorado AI Act (SB 24-205), shifting the effective date from June 30, 2026 to January 1, 2027 and replacing the bias audit requirement with a lighter transparency-and-notification regime. The bill must pass before the session ends May 13 to have any effect.

Does Colorado SB26-189 eliminate the June 30, 2026 AI compliance deadline?

Only if it passes before the Colorado session ends May 13. The original law (SB 24-205) is still in effect and applies on June 30 unless replaced. Firms should not assume the delay is coming. Build the compliance baseline now — it satisfies requirements under both versions.

What does SB26-189 require from professional services firms?

Under SB26-189, professional services firms would still need to: notify consumers when AI is used in consequential decisions (hiring, credit, housing); explain adverse decisions and offer a right to human review; and keep records of AI tools used in covered decisions. The bias audit and algorithmic impact assessment requirements from the original law would be removed.

Are law firms subject to Colorado SB26-189?

Under SB26-189, legal services have been explicitly removed from the definition of "consequential decisions." This means law firms would not be covered by the new bill. However, this relief only applies if SB26-189 passes. Under the current law (SB 24-205), legal services is still included in the consequential decisions scope. Law firms should not stand down until the bill is signed.

What should accounting and staffing firms do right now?

Do not pause compliance preparation. The minimum viable posture — AI tool inventory, vendor policy statements, and client disclosure language — satisfies requirements under both SB 24-205 and SB26-189. Build it now. If SB26-189 passes, you are ahead. If it doesn't, you are compliant by June 30.

---

The One Thing to Do This Week

Open your engagement letter template. Add the AI disclosure paragraph before your next client renewal or new engagement.

You don't know yet whether SB26-189 will pass. You don't need to. The disclosure is required under both versions of the law. Adding it this week means every Colorado client you onboard between now and May 13 is covered — regardless of which version of the law takes effect.

After that, build the inventory. The compliance window is closing. June 30 is not a flexible date.

---

We track Colorado and state AI compliance developments weekly, translated for professional services firm owners — not compliance departments. Subscribe to The Crossing Report and we'll update you the moment the May 13 session closes.

Related reading:

• Colorado's AI Law May Get Replaced Before It Takes Effect: Plan Either Way
• Colorado ADMT: The June 30 Deadline for Professional Services Firms
• Colorado AI Act Small Business Exemption Explained