The 5 W's

A 5-Day Update on SB 26-189 and the End of the Nation’s First AI Anti-Discrimination Act – A Policy Decision Affecting Every American Who Applies for a Job, Loan, or Apartment – Yet Receiving Almost No Public Attention

Published: May 18, 2026
By: Zeeshan Khan
Reading time: 15 minutes
Category: Technology / Consumer Rights / Law

DENVER – May 18, 2026 – The Colorado General Assembly passed Senate Bill 26-189 on May 13, 2026, a law that repeals and replaces the Colorado AI Act (SB 24-205), the first comprehensive state law in the United States designed to prevent algorithmic discrimination in hiring, housing, lending, healthcare, and education. The new law removes nearly all testing and risk-management requirements, replacing them with a narrower disclosure-and-human-review framework that takes effect January 1, 2027.

This repeal happened with almost no national media coverage – no major newspaper has run a story since the bill passed – despite affecting every American who interacts with AI-driven decisions about jobs, loans, apartments, or medical care.

The Essentials: Who, What, When, Where, Why, How

Who: The parties involved are the Colorado General Assembly (Senate Majority Leader Robert Rodriguez, Assistant House Majority Leader Jennifer Bacon); Governor Jared Polis, who has indicated he will sign the bill; Colorado Attorney General Phil Weiser; AI developers and deployers doing business in Colorado; and consumers, employees, and job applicants whose lives are affected by automated decisions.

What: Passage of SB 26-189, which repeals the Colorado AI Act (SB 24-205) and replaces it with a narrower regulatory framework for “automated decision-making technology” (ADMT) used in “consequential decisions” in employment, education, financial services, insurance, healthcare, residential real estate, and essential government services.

When: The bill was introduced on May 1, 2026; passed the Senate on May 7; passed the House on May 12-13; the legislative session ended on May 13; and the bill is awaiting Governor Polis’s signature as of May 18.

Where: The Colorado state legislature in Denver. The law applies to any entity “doing business in Colorado” that develops or deploys covered ADMT – meaning it affects companies nationwide that serve Colorado residents.

Why (Immediate Cause): The original 2024 law faced intense criticism from business groups, AI developers, and Governor Polis himself, who called it too burdensome. A federal lawsuit filed by Elon Musk’s xAI and joined by the Trump Department of Justice froze enforcement on April 27, 2026, forcing Colorado lawmakers to rewrite the law before the legislative session ended.

How (Mechanism): SB 189 replaces the 2024 Act entirely. It shifts from a risk-management model (inspired by the EU AI Act) to a disclosure-and-rights model (similar to California’s CCPA privacy regulations). The new law requires companies to tell consumers when AI is making consequential decisions and to provide meaningful human review upon request – but does not require pre-deployment testing for discrimination.

Case Background

The Colorado AI Act (SB 24-205), passed in May 2024, was the first state law in the nation designed specifically to regulate algorithmic discrimination. It would have taken effect on June 30, 2026 – just six weeks from now. The law required both developers (companies that build AI systems) and deployers (companies that use AI systems) to conduct risk assessments, implement risk management programs, and use “reasonable care” to avoid algorithmic discrimination in consequential decisions affecting employment, housing, lending, healthcare, education, and essential services.

The law was controversial from the start. Governor Polis signed it in May 2024 but issued a signing statement expressing concern that it would “create a complex compliance regime…with significant, affirmative reporting requirements” and that he was “concerned about the impact this law may have on an industry that is fueling critical technological advancements.”

Despite these concerns, the law remained on the books – until April 2026.

On April 9, 2026, Elon Musk’s xAI filed a federal lawsuit challenging the Colorado AI Act on First Amendment, Dormant Commerce Clause, due process, and equal protection grounds. xAI argued that the law would compel developers to “reengineer model outputs to conform to state-preferred viewpoints.” Two weeks later, the Trump Department of Justice intervened – the first time the federal government has moved to invalidate a state AI law.

On April 27, 2026, a federal magistrate granted a joint motion to stay enforcement of the 2024 law. Under the order, Colorado “shall not initiate enforcement” until 14 days after the court rules on xAI’s preliminary injunction motion. That ruling is still pending.

Faced with a federal lawsuit, a DOJ intervention, and an impending legislative session end date of May 13, Colorado lawmakers moved quickly to replace the 2024 law with something that could survive legal challenge. Governor Polis had already convened an AI Policy Work Group that included AI developers, businesses, labor representatives, and consumer advocates. Their March 2026 draft became the foundation of SB 189.

The bill was introduced on May 1. It passed the Senate on May 7. It passed the House on May 12-13. The entire process took 12 days – with minimal public debate or media attention.

What the Original 2024 Law Required (Now Repealed)

Requirement	For Developers	For Deployers
Risk assessments	Yes	Yes
Risk management programs	Yes	Yes
Duty of “reasonable care” to avoid discrimination	Yes	Yes
Documentation	Yes	Limited
Consumer disclosure	Limited	Yes
Incident reporting	Yes	Yes

Enforcement: Colorado Attorney General only, no private right of action, no cure period.

Critics called this law “expansive, complex,” and “onerous” – with vague standards that would “stifle innovation,” particularly for small firms. The R Street Institute, a libertarian think tank, wrote that the original law “imposes a guilty-until-proven-innocent standard that mirrors Europe’s heavy-handed model, which has hobbled its digital economy.”

What SB 26-189 Does Instead (Effective Jan 1, 2027)

Covered ADMT Definition: Technology that “materially influences” a “consequential decision” in employment, education, financial services, insurance, healthcare, residential real estate, and essential government services.

Excluded: Advertising, content moderation, cybersecurity, fraud prevention, routine clerical tasks, and consumer chatbots with acceptable use policies.

Developer Obligations (starting Jan 1, 2027):

Requirement	Detail
Documentation	Provide intended uses, training data categories (to extent known), known limitations and risks, monitoring instructions
Update notices	Notify deployers of material updates or modifications
Record retention	Keep compliance records for at least 3 years

Note: These apply only where the developer marketed or intended the ADMT for use in consequential decisions.

Deployer Obligations (starting Jan 1, 2027):

Requirement	Detail
Pre-decision notice	Clear disclosure that ADMT is or will be used, provided before the consequential decision
Post-adverse outcome disclosure	Within 30 days, provide plain-language description of the decision, ADMT’s role, and consumer rights
Human review on request	Opportunity for “meaningful human review” by trained individual with authority to override
Data correction	Process for correcting factually inaccurate personal data
Record retention	Keep records for at least 3 years after the decision

“Meaningful human review” requires a trained individual who does not simply default to the system’s output.

What Was Removed (Compared to 2024 Law):

2024 Requirement	Status in SB 189
Mandatory risk assessments for developers	Removed
Mandatory risk assessments for deployers	Removed
Risk management program requirements	Removed
Duty of “reasonable care” to avoid discrimination	Removed
Incident reporting requirements	Removed

Enforcement Structure:

Element	Detail
Who enforces	Colorado Attorney General only (no private right of action)
Legal mechanism	Deceptive trade practices under Colorado Consumer Protection Act
Cure period	60 days before enforcement, unless violation was knowing or repeated
Rulemaking	AG must adopt rules by Jan 1, 2027 clarifying disclosure requirements
Reporting	AG must report on enforcement actions Jan 2028 – Jan 2030

The cure period expires on Jan 1, 2030 – after that, no cure period.

Arguments in Favor of SB 189

1. The 2024 Law Was Unworkable

Supporters – including Governor Polis, the Colorado Chamber of Commerce, and the bill’s Democratic sponsors – argue that the original law imposed vague, impossible-to-follow requirements. Governor Polis noted in his 2024 signing statement that the original law would “create a complex compliance regime…[with] significant, affirmative reporting requirements.” Loren Furman, executive director of the Colorado Chamber of Commerce and a member of the working group, said the bill “strikes a reasonable balance” and that “lawmakers have largely respected the working group’s consensus.”

2. Small Businesses Could Not Comply

Critics of the 2024 law warned that vague, costly mandates would harm small firms lacking resources to navigate compliance. The R Street Institute wrote that the original law “imposes a guilty-until-proven-innocent standard that mirrors Europe’s heavy-handed model, which has hobbled its digital economy.” Adam Burrows of Range Ventures called SB 189 “a massive improvement” over the 2024 law.

3. Existing Laws Already Cover Discrimination

Supporters argue that federal and state civil rights laws – including the Civil Rights Act of 1964, the Fair Housing Act, and the Equal Credit Opportunity Act – already prohibit discrimination in employment, housing, and lending regardless of whether a human or an AI makes the decision. Adding AI-specific regulations creates redundant compliance burdens.

4. A National Framework Is Needed, Not 50 State Laws

Governor Polis has called for “a cohesive federal approach…applied by the federal government to limit and preempt varied compliance burdens on innovators and ensure a level playing field across state lines.” SB 189, supporters argue, is a reasonable stopgap while Congress considers national AI legislation.

Arguments Against SB 189

1. It Removes Meaningful Protections

The 2024 law’s risk assessment and risk management requirements were designed to prevent discrimination before it happens. SB 189 removes those requirements entirely, replacing them with disclosure and after-the-fact human review. Robert Lindgren of Colorado’s AFL-CIO told Denver7 that the bill is “a good first step” but said more is needed: “If we’re looking at a framework that actually protects more of the public, it’s that you test these systems ahead of time to ensure that they do not discriminate.”

2. No Private Right of Action Means Weak Enforcement

Under SB 189, only the Attorney General can enforce violations – and the AG’s office has limited resources. Without a private right of action, a consumer who is discriminated against by an AI system cannot sue the company directly. They must hope the AG decides to investigate. During testimony on the bill, critics “suggested that a private right of action would be necessary given the Attorney General’s office’s limited resources.”

3. The 60-Day Cure Period Lets Violators Off the Hook

If the AG finds a violation, the deployer or developer gets 60 days to “cure” the problem before any enforcement action – unless the violation was knowing or repeated. Critics argue this creates a “get out of jail free” card for companies that discriminate, as long as they fix it after being caught. Senate Majority Leader Robert Rodriguez wanted the cure period to be shorter, but the working group did not include it in their draft. Rodriguez said the right to cure should not exist indefinitely.

4. The Bill Was Rushed Through With Little Public Debate

SB 189 was introduced on May 1 and passed by May 13 – a 12-day process for a bill that repeals the nation’s first AI anti-discrimination law. The legislative session was ending, and lawmakers faced pressure from the federal lawsuit and the Trump DOJ’s intervention. There was no opportunity for extended public hearings or amendment.

5. It Prioritizes Innovation Over Civil Rights

Opponents argue that SB 189 represents a choice: protect tech companies from compliance burdens, or protect consumers from algorithmic discrimination. The bill chooses the former. Assistant House Majority Leader Jennifer Bacon, who supported the bill, acknowledged the tension: “Businesses and entities are using technology to determine if we get a job, to determine if we get a loan, to possibly determine what our healthcare diagnosis is. And so…people want to know what happens if they get it wrong, because in real life, if they get it wrong, it hurts people.”

Media Coverage and Public Awareness

Despite the fact that AI systems are already making consequential decisions about jobs, loans, apartments, and medical care for millions of Americans, the repeal of the nation’s first AI anti-discrimination law has received almost no media attention. Denver7 covered the vote on May 11. Legal trade publications – Kelley Drye & Warren LLP, Reed Smith LLP, the National Law Review – published analyses. But as of May 18, 2026, no major national newspaper, no cable news network, and no broadcast evening newscast has aired a segment on SB 189.

The lack of public awareness is particularly striking given what is at stake. Every time you apply for a job, your resume is likely screened by an AI system. Every time you apply for a credit card or a loan, an algorithm helps decide your fate. Every time you apply for an apartment, AI may be involved in your eviction risk score. Under the 2024 law, companies would have had to test those systems for discrimination before using them. Under SB 189, they mostly have to tell you after the fact – and give you a human to appeal to.

Current Status

• SB 26-189 passage: Passed both chambers May 12-13, 2026
• Governor’s signature: Expected; Polis has indicated support
• Effective date: January 1, 2027
• 2024 Colorado AI Act: Repealed as of effective date of SB 189
• Federal court enforcement stay (2024 law): Active until 14 days after ruling on xAI motion
• AG rulemaking for SB 189: Required by Jan 1, 2027
• Private right of action: Not included
• Cure period: 60 days (expires Jan 1, 2030)
• National media coverage: Minimal; no major story since passage

Why This Matters to the Average Person

The repeal of the Colorado AI Act might seem like an obscure state legislative fight, but it matters for four reasons that affect every American who has ever applied for a job, a loan, an apartment, or medical care.

First, you are already being scored by AI – and you probably don’t know it. If you have applied for a job in the last three years, there is a significant chance your resume was screened by an AI system that decided whether a human would ever see it. If you applied for a credit card or a loan, an algorithm may have helped determine your interest rate or denied you entirely. If you applied for an apartment, an AI-generated eviction risk score may have influenced your landlord’s decision. Under the 2024 law, companies would have had to test those systems for discrimination. Under SB 189, they don’t.

Second, prevention is being replaced with reaction. The 2024 law required companies to test AI systems for bias before they caused harm – a preventative approach similar to crash-testing a car before it hits the road. SB 189 requires disclosure and human review after the fact – like giving you a report after a crash and letting you appeal. Once you’ve been denied a loan or passed over for a job, an after-the-fact human review is cold comfort.

Third, enforcement is now in the hands of one person. Under SB 189, only the Colorado Attorney General can enforce violations. The AG’s office has limited resources. If you are discriminated against by an AI system, you cannot sue the company. You can only file a complaint and hope the AG decides to investigate. Given that Colorado has over 5 million residents and countless AI-driven transactions every day, the odds of any individual case being investigated are vanishingly small.

Fourth, Colorado was just the first – and now the standard. Other states – California, New York, Illinois – were watching Colorado’s experiment. If the nation’s first AI anti-discrimination law lasted only two years before being replaced by a weaker alternative, other states may adopt the weaker model rather than the stronger one. The Trump DOJ’s intervention in the xAI lawsuit signals that the federal government may preempt or invalidate stronger state AI laws altogether. SB 189 may be the ceiling, not the floor – the most protection American consumers can expect from algorithmic discrimination.

The Colorado AI Act was a first-in-the-nation attempt to answer a fundamental question of the AI age: Who watches the watchers? Who ensures that the algorithms scoring our lives are not discriminating against us based on race, gender, age, or disability? The original law had an answer: mandatory testing before deployment. SB 189 has a different answer: disclosure and a human appeal. Whether that is enough – whether it is even enforceable – is a question that will affect every American for decades to come.

Sources

• Denver7 (May 11, 2026) – Local news coverage of bill passage and AFL-CIO response
• Kelley Drye & Warren LLP – Ad Law Access (May 8, 2026) – Regulatory analysis of enforcement stay and legislative rewrite
• Reed Smith LLP – Technology Law Dispatch (May 8, 2026) – Detailed analysis of SB 189 provisions
• National Law Review (May 1, 2026) – xAI lawsuit and enforcement stay details
• Colorado Politics (May 4, 2026) – Legislative process and working group dynamics
• R Street Institute (August 2025) – Policy critique of 2024 law (historical context)
• Colorado General Assembly (May 1-13, 2026) – Bill text and voting records
• Governor Jared Polis (May 2024) – Signing statement for SB 24-205 (historical context)