CO SB26-189: Automated Decision-Making Technology
Colorado SB26-189 introduces new requirements for automated decision-making technology (ADMT), including risk assessments, consumer opt-out rights, and transparency obligations, expanding on existing data privacy laws.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 14, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: Expected effective date: July 1, 2026 (if passed).. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New obligations for ADMT: risk assessments, opt-out rights, and disclosure requirements.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants
What you must do
Review and update privacy policies, implement opt-out mechanisms for ADMT, conduct risk assessments.
Deadline
Expected effective date: July 1, 2026 (if passed).
Source: https://leg.colorado.gov/bills
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- US-CONGRESS BILLS-119hr9655ih: Fair Allocation of Infrastructure Responsibility for Data Act; FAIR Data Act
- Stewart, Sampson, Abdelaziz Introduce Legislation to Protect Consumers by Requiring Companies to Delete Payment Information After Subscription Cancellation - Insider NJ
- Vermont Governor Signs Data Privacy Bill - EPIC – Electronic Privacy Information Center
- New Jersey, Connecticut Enact 2026 Data Broker Laws - State Affairs
- NJ Delays Registry Aspect Of Newly Enacted Data Broker Law - Law360