Colorado Governor Jared Polis signed Senate Bill 26-189 on May 14, 2026, replacing the state's first-in-the-nation AI antidiscrimination law before it ever took effect. The signing was supposed to resolve two years of conflict. It hasn't.
Two laws, one freeze
The original law, SB 24-205, was signed in May 2024 and was originally scheduled to take effect February 1, 2026. Its operative date was extended twice, and a court temporarily suspended enforcement in early 2026 following a lawsuit filed by xAI, which the U.S. Department of Justice intervened to support. The replacement bill, SB 26-189, passed both chambers of the Colorado legislature in eight days and was signed into law — but the court order freezing enforcement of the original law extends to successor legislation, meaning SB 26-189 also can't be enforced until the injunction question is resolved and rulemaking is complete.
Colorado Attorney General Philip Weiser has stated he does not intend to enforce SB 24-205 or any legislation replacing or amending it — including SB 26-189 — until after the rulemaking process has concluded. No rulemaking timeline has been published. June 30, 2026, the date the original law was supposed to become binding, is now 26 days away and essentially irrelevant.
What xAI and the DOJ are actually arguing
On April 9, 2026, xAI filed suit in federal court seeking to block the law on four constitutional grounds: First Amendment compelled speech, the Dormant Commerce Clause, due process vagueness, and equal protection. On April 24, the Department of Justice intervened on xAI's side. The DOJ focused its complaint on the equal protection argument, contending the law's carveout for AI systems designed to advance diversity constitutes impermissible racial and characteristic-based classifications.
The DOJ's intervention marked the first time the federal government has sought to invalidate a state AI law, and was a direct outgrowth of President Trump's Executive Order 14365 directing the DOJ to challenge state AI regulations. The Commerce Department was directed by that same executive order to publish a list of burdensome state AI laws by March 11, 2026. That evaluation has yet to be publicly released.
The constitutional stakes here are not local. The First Amendment compelled-speech claims and Equal Protection challenges raised by xAI and the DOJ could have significant implications beyond Colorado for other state AI regulatory efforts. If these challenges continue, a ruling striking down portions of SB 26-189 on constitutional grounds could reshape the permissible scope of state AI regulation nationwide.
What the replacement law actually does
On May 14, Colorado adopted SB 26-189, replacing the 2024 law it passed but never put into practice. The new law forgoes three of the most significant obligations of the prior statute: risk management programs, impact assessments, and the duty to use reasonable care to prevent algorithmic discrimination. In their place, the law narrows its scope to automated decision-making technologies that make "consequential decisions" and imposes four new operational duties: notifying users when they interact with AI, disclosing adverse outcomes within 30 days, correcting inaccurate personal data on request, and providing meaningful human review and reconsideration.
SB 26-189 does not offer a private right of action; all violations are considered deceptive trade practices and are brought by the Colorado Attorney General. The new law also voids any contract clause that attempts to shift liability for a party's own discriminatory use of automated decision-making technology onto another party. That last provision creates direct exposure for AI vendors whose customers try to contractually offload risk.
For small businesses operating in Colorado — or anywhere that deploys AI tools in hiring, lending, or healthcare decisions — the practical picture is this: the CO AI Law will not take effect on June 30, and seems unlikely to ever be implemented in its current form. Employers should continue to monitor this space and be prepared for potential further litigation over AI regulation in Colorado. The January 1, 2027 effective date for SB 26-189 gives businesses additional runway, but only if the law survives a preliminary injunction motion that hasn't been filed yet.
Three additional Colorado AI bills — covering chatbot safety, AI in health insurance coverage decisions, and AI use by licensed mental health professionals — are on Governor Polis's desk, having passed the legislature before the May 13 adjournment. Whether he signs those while the replacement law's enforceability remains unresolved is an open question.
