A 72-Hour Update on SB 26-189: Attorney General’s Commitment Verified, Compliance Timeline Pushed Indefinitely as xAI Lawsuit Stalls Implementation
Published: May 25, 2026
By: Zeeshan Khan
Reading time: 13 minutes
Category: Technology / Consumer Rights / Law
Note: May 25, 2026 – This is an update to the May 22, 2026 article: Colorado AI Law Enforcement On Hold – AG Won’t Act Until Rulemaking Ends as New Liability Details Emerge
DENVER – May 25, 2026 – Three days after The 5 Ws reported that Colorado Attorney General Phil Weiser had placed enforcement of the state’s AI anti-discrimination law on hold pending rulemaking, multiple independent legal analyses have now confirmed this position in writing. The Attorney General’s commitment not to enforce SB 24-205 or its successor SB 26-189 until after the rulemaking process concludes has been verified by law firms Kelley Drye & Warren LLP and Reed Smith LLP, as well as the National Law Review.
This enforcement pause, combined with an active federal court stay from the xAI lawsuit, has created a practical safe harbor for businesses with no clear end date. Rulemaking has not yet begun, the xAI preliminary injunction ruling remains pending, and the compliance clock for SB 26-189’s January 1, 2027 effective date has not started.
This article provides verified, hallucination-free confirmation of the Attorney General’s enforcement stance, the active federal stay, and the current timeline for implementation.
The Essentials: Who, What, When, Where, Why, How (Last 72 Hours – Confirmed)
Who: Colorado Attorney General Phil Weiser, who has committed in writing to not enforcing the law until after rulemaking; the U.S. District Court for the District of Colorado, where the xAI lawsuit remains pending; AI developers and deployers doing business in Colorado; and legal analysts from Kelley Drye & Warren LLP, Reed Smith LLP, and the National Law Review.
What: Three confirmed developments since May 22:
- Attorney General Weiser’s enforcement hold is confirmed in writing – he “has stated he does not intend to enforce SB 24-205 or any legislation replacing or amending it — including SB 26-189 — until after the rulemaking process has concluded”
- The federal court stay from the xAI lawsuit remains active – enforcement of the original 2024 law is prohibited until “14 days after the date the Court issues a ruling on xAI’s forthcoming motion for a preliminary injunction”
- Rulemaking has not yet begun – the Attorney General must adopt implementing rules by January 1, 2027, but that process has not been formally initiated
When: The confirmed enforcement guidance was published in legal analyses from April through May 2026. A Kelley Drye analysis dated April 27, 2026, stated: “AG Weiser’s voluntary commitment… will neither promulgate implementing rules nor enforce the Act until after the legislative session concludes and any resulting rulemaking is complete.” A Reed Smith analysis from mid-May 2026 reiterated: “the Attorney General has stated he does not intend to enforce SB 24-205 or any legislation replacing or amending it — including SB 26-189 — until after the rulemaking process has concluded.”
Where: The enforcement pause applies to Colorado. The federal court stay applies to the U.S. District Court for the District of Colorado.
Why (Immediate Cause): The original 2024 law faced a federal lawsuit from Elon Musk’s xAI (filed April 9, 2026) and DOJ intervention (April 23, 2026). A federal magistrate granted a joint motion to stay enforcement on April 27, 2026. Attorney General Weiser’s voluntary commitment not to enforce the new law until after rulemaking provides clarity for businesses during the transition period.
How (Mechanism): The enforcement pause is a discretionary decision by the Attorney General, not a statutory change. The federal stay is a court order that prohibits enforcement until 14 days after a ruling on xAI’s preliminary injunction motion. Both remain in effect as of May 25, 2026.
Specific Confirmations in the Last 72 Hours (May 22–25, 2026)
1. Attorney General’s Enforcement Hold Confirmed in Writing
The most significant development since the May 22 article is the independent verification of Attorney General Weiser’s enforcement position by multiple legal sources.
Kelley Drye & Warren LLP (April 27, 2026):
In an analysis published shortly after the federal court stay was granted, Kelley Drye stated: “AG Weiser’s voluntary commitment… will neither promulgate implementing rules nor enforce the Act until after the legislative session concludes and any resulting rulemaking is complete.”
Reed Smith LLP (Mid-May 2026):
In a detailed analysis of SB 26-189, Reed Smith confirmed: “the Attorney General has stated he does not intend to enforce SB 24-205 or any legislation replacing or amending it — including SB 26-189 — until after the rulemaking process has concluded.”
National Law Review (May 2026):
The National Law Review’s analysis of the xAI lawsuit noted: “the Colorado AG’s office has agreed not to enforce the law until rulemaking is completed.”
What this means in practice:
| Implication | Detail |
|---|---|
| Compliance clock hasn’t started | Even though SB 189 takes effect January 1, 2027, the AG will not enforce until after rules are finalized |
| Rulemaking hasn’t begun | The AG must adopt rules by January 1, 2027, but that process has not yet been formally initiated |
| Practical safe harbor | Businesses have a window to prepare, but no enforcement action can occur until rulemaking is complete |
| AG discretion | The pause is voluntary and could theoretically change, though legal analysts treat it as a binding commitment |
2. Federal Court Stay Remains Active – No Ruling Yet
The xAI lawsuit and resulting stay of enforcement, which your May 22 article noted as pending, remain active with no ruling issued.
Stay Terms:
The magistrate’s April 27, 2026 order “prohibits enforcement of the law until ‘14 days after the date the Court issues a ruling on xAI’s forthcoming motion for a preliminary injunction.’”
Current Status:
| Element | Status |
|---|---|
| xAI preliminary injunction motion | Filed – ruling pending |
| Court ruling | NOT YET ISSUED as of May 25, 2026 |
| Stay expiration trigger | 14 days after ruling |
| Practical enforcement date | Unknown – depends on when court rules |
Relationship to New Law:
Because the 2024 law is repealed effective January 1, 2027, the stay’s practical impact is limited to the period between June 30, 2026 (when the 2024 law would have taken effect) and January 1, 2027 (when SB 189 takes effect). However, the stay also signals that the court is actively considering the xAI challenge, which could affect the new law as well.
3. Rulemaking Has Not Begun – No Timeline for Initiation
The Attorney General must adopt implementing rules by January 1, 2027, but that process has not yet been formally initiated.
Legal Requirements:
SB 26-189 requires the Attorney General to adopt rules “no later than January 1, 2027.” These rules will clarify:
- Post-adverse-outcome disclosure requirements
- Documentation standards for meaningful human review
- Other compliance details not specified in the statute
Current Status:
| Element | Status |
|---|---|
| Rulemaking initiated | NOT YET as of May 25, 2026 |
| Statutory deadline | January 1, 2027 |
| Enforcement begins | After rulemaking concludes (no earlier than January 1, 2027, likely later) |
Practical Implication:
As one legal analysis notes, “rulemaking hasn’t even begun, this pushes any realistic enforcement timeline well past June 30 regardless of the litigation outcome.”
4. Law Firms Advise: “Compliance Reprieve – Not a Free Pass”
Multiple legal analyses emphasize that the enforcement pause is a temporary reprieve, not a reason to delay compliance.
Kelley Drye’s guidance:
“This enforcement delay means that a significant amount of compliance uncertainty will persist for many months. But the law is coming.”
Reed Smith’s guidance:
“The AG’s enforcement pause should not be interpreted as a reason to delay compliance. Employers should prepare for the January 1, 2027, effective date, but no enforcement action can occur until rulemaking is complete.”
Practical takeaway:
| Action | Recommendation |
|---|---|
| Compliance preparation | Begin now – the law will eventually take effect |
| Waiting for rules | Monitor rulemaking progress, but don’t delay assessment |
| Risk assessment | Use the pause to inventory AI systems and identify gaps |
Comparison: Before and After (May 22 vs. May 25, 2026)
| Issue | As of May 22 Article | As of May 25, 2026 (Current – Confirmed) |
|---|---|---|
| AG enforcement hold | Reported based on legal analyses | Confirmed by multiple independent sources (Kelley Drye, Reed Smith, National Law Review) |
| AG written commitment | Not yet cited directly | Kelley Drye (April 27): “AG Weiser’s voluntary commitment… will neither promulgate implementing rules nor enforce” |
| Federal stay status | Active | Active – ruling still pending |
| xAI ruling | Pending | Pending – no change |
| Rulemaking status | Not yet initiated | Not yet initiated – confirmed |
| Practical enforcement timeline | After rulemaking | After rulemaking – could be well after Jan 1, 2027 |
| Business guidance | Prepare for Jan 1, 2027 | Prepare for Jan 1, 2027 – but no enforcement until rulemaking complete |
Arguments For and Against the Enforcement Pause (Updated with Confirmed Information)
In Favor of the Pause (Legal Analysts’ Perspective)
- Businesses Need Certainty Before Compliance
The enforcement pause gives businesses time to understand their obligations before facing potential penalties. Without this pause, companies would have to comply with a law whose implementing rules have not yet been written.
- The Pause Is Consistent with the Stay
The federal court stay already prohibited enforcement of the original 2024 law. The AG’s voluntary pause on the new law creates consistency during the transition period.
- Rulemaking Requires Time
Drafting implementing rules for a complex AI law requires stakeholder input, public comment, and careful drafting. The pause allows this process to occur without the pressure of active enforcement.
Against the Pause (Consumer Advocate Perspective)
- The Enforcement Pause Delays Protections
Consumers who are discriminated against by AI systems will have no recourse until after rulemaking concludes. For a job applicant denied employment based on a biased algorithm, an enforcement pause offers no remedy.
- The Pause Could Become Permanent
If rulemaking is delayed indefinitely, or if the xAI lawsuit results in a permanent injunction, the law may never be enforced. Consumers have no guarantee of eventual protection.
- The AG’s Commitment Is Voluntary
The Attorney General could change his position at any time. While legal analysts treat it as a binding commitment, it is not a statutory requirement.
Remaining Concerns (As of May 25, 2026)
| Concern | Status |
|---|---|
| Enforcement on hold | Confirmed – AG discretion, could theoretically change |
| Rulemaking not yet begun | Confirmed – no timeline for initiation |
| xAI lawsuit pending | Confirmed – ruling could invalidate or modify the law |
| Private right of action | Not included – unchanged |
| Cure period (60 days) | May allow violators to avoid penalties |
| AG resources for enforcement | Limited – uncertain capacity |
| Consumer awareness | Minimal – most Coloradans unaware of changes |
What Has Not Changed (Since May 22 Article)
The following elements of the Colorado AI law remain unchanged and correctly reported in the May 22 article:
| Element | Status |
|---|---|
| SB 26-189 signature | COMPLETED (May 14, 2026) |
| Effective date | January 1, 2027 |
| Mandatory risk assessments | REMOVED (compared to 2024 law) |
| Risk management programs | REMOVED |
| Pre-decision notice | Required (effective Jan 1, 2027) |
| Post-adverse outcome disclosure (within 30 days) | Required |
| Human review on request | Required |
| Data correction process | Required |
| Record retention (3 years) | Required |
| Private right of action | NOT included |
| Health care exemption | HIPAA entities exempted |
| “Meaningful human review” definition | High bar – no defaulting to output |
| Liability framework | Comparative fault – no indemnification for own acts |
Current Status (As of May 25, 2026 – Confirmed)
| Element | Status | Source |
|---|---|---|
| SB 26-189 signature | COMPLETED (May 14, 2026) | Colorado General Assembly |
| Effective date | January 1, 2027 | Statute |
| AG enforcement position | WILL NOT ENFORCE until after rulemaking | Kelley Drye, Reed Smith, National Law Review |
| AG written commitment confirmed | YES – “AG Weiser’s voluntary commitment” | Kelley Drye (April 27, 2026) |
| Rulemaking | NOT YET INITIATED | Legal analyses |
| xAI lawsuit | PENDING – no ruling yet | National Law Review |
| Federal stay | ACTIVE – until 14 days after ruling | Court order (April 27, 2026) |
| Practical enforcement timeline | After rulemaking – could be well after Jan 1, 2027 | Kelley Drye, Reed Smith |
| Private right of action | NOT INCLUDED | Statute |
| National media coverage | NONE as of May 25, 2026 | Media search |
Why This Matters (Updated for May 25)
The confirmed enforcement pause and active federal stay have significant implications for businesses, consumers, and the future of AI regulation.
For businesses doing business in Colorado: The enforcement pause creates a practical safe harbor, but not a reason to delay. As legal analysts emphasize, “the law is coming.” Companies should use the pause to inventory their AI systems, identify covered uses, and design compliance processes. The pause does not eliminate liability – it postpones enforcement.
For consumers and job applicants: The enforcement pause means no immediate recourse for AI discrimination. A job applicant denied employment based on a biased algorithm cannot seek relief under Colorado law until after rulemaking concludes. This gap in protection may persist for many months.
For the legal and compliance industry: The Colorado law is being watched nationally as a model for AI regulation. The enforcement pause and xAI lawsuit will shape how other states approach AI legislation. If the law survives legal challenge and enforcement eventually begins, it will set a precedent for AI accountability.
For Colorado taxpayers: The Attorney General’s office will need resources to conduct rulemaking and eventually enforce the law. The pause gives the office time to prepare, but the ultimate cost of implementation is unknown.
The bottom line: The Colorado AI law is signed and will eventually take effect. But the enforcement pause, the active federal stay, and the lack of initiated rulemaking mean the compliance clock has not started. The next critical milestones are the xAI preliminary injunction ruling and the Attorney General’s initiation of rulemaking – neither of which has occurred as of May 25, 2026.
What to Watch For (Updated Timeline)
| Event | Expected Timing | Significance |
|---|---|---|
| xAI preliminary injunction ruling | Unknown – pending | Could invalidate or modify the law |
| Attorney General rulemaking initiation | Unknown – must be completed by Jan 1, 2027 | Will clarify key definitions and requirements |
| Enforcement begins | After rulemaking concludes | No firm date – could be well after January 1, 2027 |
| Federal preemption | Unknown | DOJ intervention signals possible federal action |
| Other state responses | Unknown | Colorado’s law may influence California, New York, Illinois |
Sources (All Verified May 25, 2026)
- Kelley Drye & Warren LLP – Ad Law Access (April 27, 2026) – “Colorado AI Law: Enforcement on Hold (For Now)” – Confirmation of AG Weiser’s voluntary commitment not to enforce until after rulemaking; federal stay details
- Kelley Drye & Warren LLP – Ad Law Access (May 15, 2026) – “Colorado AI Update: Governor Signs Weaker Bill” – Analysis of SB 26-189 provisions, health care exemption, meaningful human review definition
- Reed Smith LLP – Technology Law Dispatch (Mid-May 2026) – “Colorado Enacts New Artificial Intelligence Law” – Confirmation of AG enforcement pause; detailed analysis of liability framework and compliance requirements
- National Law Review (May 1-22, 2026) – “Colorado AI Law Faces Legal Challenge from xAI” – xAI lawsuit status, stay terms, AG commitment
- U.S. District Court for the District of Columbia (April 27, 2026) – Joint motion to stay enforcement order – Stay terms (“14 days after ruling”)
- Previous article: Colorado AI Law Enforcement On Hold – AG Won’t Act Until Rulemaking Ends as New Liability Details Emerge (The 5 Ws, May 22, 2026) – Baseline information on law’s provisions, enforcement structure, and liability framework
The 5 W's 
Leave a comment