Colorado's AI Act Stalls. Don't Stall Your AI Governance.

The first comprehensive state AI law in the country just hit a wall. A federal magistrate judge stayed enforcement of the Colorado AI Act last week, and the state attorney general has said he won't write rules or enforce the law until the legislature finishes reworking it. A law that was supposed to take effect June 30 is effectively frozen.

Plenty of companies will read this as permission to stop working on AI governance. That would be a mistake.

What happened to the Colorado AI Act

The law targeted algorithmic discrimination in consequential decisions like hiring, lending, housing, and healthcare. It required impact assessments, disclosures, and risk management programs from the companies that build and deploy those systems.

It has been delayed, debated, and challenged almost since the day it passed. Now litigation and a pending legislative rewrite have pushed any realistic enforcement well past its effective date, and a proposed replacement framework would narrow its scope.

Why AI regulation uncertainty isn't a reason to wait

The risks the law was written for don't disappear when enforcement does. If an AI tool in your hiring process or your customer operations treats people unfairly, you still own that outcome. Customers, employees, and plaintiffs' attorneys don't wait for a state rulemaking.

The compliance work also transfers. Inventorying your AI systems, assessing their impact, documenting how decisions get made, and giving people a way to appeal are the same building blocks every serious framework asks for, in the US and abroad.

Laws can be stayed. The consequences of a bad AI decision can't.

What to keep doing

Keep your AI inventory current. You can't govern what you can't list, and most companies are surprised by how many AI tools are already in use.

Assess the high-stakes uses first. Anything that affects someone's job, money, access, or service level deserves documented review, testing for unfair outcomes, and human oversight.

Build for the strictest reasonable standard. Regulation is a patchwork that keeps moving. A governance program built for one state's rules will need rebuilding. One built on sound principles will adapt.

The headlines will keep swinging between deadlines and delays. Your customers just want to be treated fairly.

Build AI governance because it's right for your customers, not because a deadline told you to.

Source: Squire Patton Boggs, The Colorado AI Act hits a wall