America's First 'AI Anti-Discrimination Law' Was Set to Take Effect Tomorrow — Then They Gutted It Days Before
The Colorado AI Act was supposed to take effect June 30. But Governor Polis signed SB 189 on May 14, pushing the start date to January 2027 and stripping out the core provisions — the duty to prevent algorithmic discrimination, impact assessments, risk management. America's first comprehensive AI law shrank to a transparency-disclosure shell before it even went live.

America's first 'AI anti-discrimination law' got hollowed out before it could even take effect
Here's the deal: tomorrow — June 30 — was supposed to be the day America's first comprehensive AI regulation, the Colorado AI Act, took effect. But with that date around the corner, Colorado rewrote the law. Governor Jared Polis signed SB 189 on May 14, pushing the effective date to January 1, 2027 — and, more importantly, stripping out the provisions that were the heart of the law.
What got removed is the real story. The original Colorado AI Act (SB 24-205) imposed on companies handling "high-risk AI systems" four things: a duty of care to prevent algorithmic discrimination, a requirement to run risk-management programs, mandatory impact assessments, and an obligation to report to the attorney general. This amendment deleted nearly all four. What's left is a much lighter, transparency-and-disclosure-focused frame — basically "tell people you're using AI."
Why does this matter? The Colorado AI Act was called the "scaled-down American version of the EU AI Act," watched as a model other states would copy. That first domino emptying out its core before it even went live is an event that reveals where American-style AI regulation is actually heading. The ambitious anti-discrimination duties got delayed and trimmed in the face of compliance burden and industry pushback.
So here's what we'll unpack: what the original Colorado AI Act required, what SB 189 changed, why it retreated right before the effective date, and what it means for the entire trajectory of U.S. AI regulation. Three players: Colorado (governor and legislature), the law itself, and the regulated businesses versus consumers.
The players — Colorado, the law, and business vs. consumers
First, Colorado (Governor Polis and the legislature). Colorado was the pioneer, passing America's first comprehensive AI anti-discrimination law in May 2024. Yet Polis himself, at signing, voiced concern that the law "could chill innovation" and favored a unified federal approach. In other words, this was a law "a governor signed while uneasy about it" from the start — and this retreat can be read as that internal tension finally erupting.
Next, the Colorado AI Act itself. Its ambition was to stop AI from unfairly discriminating against particular groups when used in consequential decisions — hiring, lending, housing, education, healthcare. Not just "tell people you use AI," but a structure that made companies actively check discrimination risk (impact assessments), manage it (risk programs), and be accountable for it (duty of care). That's why it earned the "American EU AI Act" label. This amendment removed those active duties and shifted the law's character toward passive disclosure.
Third, the regulated businesses and the consumers meant to be protected. Companies — especially HR, fintech, and health-tech firms that use AI to make decisions about people — argued that impact assessments and risk management were enormous compliance costs. Consumers and civil-society groups, conversely, criticize the retreat: "the safeguards that would stop AI from discriminating against me are disappearing." It's a head-on collision between business crying efficiency and innovation, and consumers crying protection and accountability.
One sentence ties it together: the state that wrote America's first AI anti-discrimination law (Colorado), under pressure that its active duties were too heavy a burden on business, delayed the effective date and stripped out the core right before launch — retreating to a transparency-disclosure shell. That's the skeleton.
What got removed, and what's left
Talk scatters, so here's the change in a table.
| Item | Original Colorado AI Act (SB 24-205) | After SB 189 |
|---|---|---|
| Effective date | June 30, 2026 | January 1, 2027 |
| Duty of care vs. algorithmic discrimination | Yes | Removed |
| Deployer risk-management program | Required | Removed |
| Impact assessment | Required | Removed |
| AG reporting obligation | Yes | Removed |
| Core character | Active prevention and management | Passive transparency and disclosure |
| Signed | May 2024 (SB 24-205) | May 14, 2026 by Gov. Polis |
Line by line. First, the six-month delay is only the surface change. The real event is the cells beside it — the column where "Removed" appears over and over. More than pushing back the start, the substance was gutting the law's core duties while they were at it. They didn't buy time; they changed the content.
Second, the "active → passive" character shift is the crux. The original law imposed an active responsibility on companies: check and manage in advance so discrimination doesn't happen. After the amendment, the center of gravity moved to passive disclosure — just announce that AI is in use. The enforcement teeth for holding someone accountable when discrimination actually occurs got much weaker. Transparency is good, but "telling" and "preventing" are entirely different intensities of regulation.
Third, the timing — retreating right before the effective date — is the symbolic part. The law had about two years of runway between passage and effect, and the core was emptied just as that runway ended. That's the pattern of "we wrote it idealistically, but couldn't bear the burden once enforcement loomed." It shows how AI regulation, strong on paper, gets trimmed at the threshold of going live under real-world pressure.
Who gets what
Start with business (especially AI deployers). First, huge compliance savings: impact assessments and risk-management programs were heavy duties requiring dedicated staff, external audits, and documentation — and removing them slashes the burden. Second, legal-uncertainty relief: dropping the vague "breach of duty of care" standard lowers litigation risk. Third, time: six more months of runway gives room to watch how federal unified-regulation talks develop.
The state of Colorado wins too. First, it stems business flight: it avoids AI companies leaving for other states over heavy regulation and keeps an "innovation-friendly" image. Second, it eases enforcement burden: active duties require administrative capacity to supervise and enforce, and that load is reduced. Third, the framing: it can say "we didn't repeal, we refined" — the law lives and the transparency clauses remain, so it's not a total retreat.
For consumers and citizens, though, it's more loss than gain. When AI unfairly screens you out in hiring, lending, or housing, the core mechanism to prevent that in advance and assign responsibility is gone. The remaining transparency clause tells you AI was used, but has weak power to check whether that AI discriminated and force a fix. As the expectation of protection shrinks, the burden of discrimination risk stays squarely on the individual. That asymmetry is the heart of the civil-society objection.
Precedents — what worked and what didn't
Ambitious regulation retreating right before or after taking effect has precedent. The closest is the EU AI Act "AI Omnibus" softening effort. Europe also built a strong AI law, but as enforcement neared, it repeatedly discussed delaying and easing some obligations over competitiveness fears. The "build it strong, trim it at the threshold" pattern is repeating on both sides of the Atlantic — evidence of how wide the gap is between AI-regulation ideals and reality.
Another is the spread of U.S. state privacy laws. When California's CCPA set the first domino, many states followed — and along the way the initially strong provisions weakened slightly state by state, tending to converge toward a looser standard. Colorado's AI retreat could likewise become a domino where other states read it as a signal that "an AI law at this level is enough," lowering overall regulatory intensity. When the first model weakens, the models that follow tend to weaken too.
On the other side, there are cases where strong regulation survived. The EU's GDPR took countless softening pressures before it took effect but kept its core, and ultimately became a global standard. The difference was enforcement will and civil-society pressure. That Colorado's AI Act couldn't hold its core and got trimmed reads as a signal that social consensus and enforcement infrastructure for AI discrimination haven't ripened the way GDPR's had. Regulation doesn't stand on paper alone — the social consensus to hold it up has to grow with it.
How rivals counter
The thing to watch most is other states' legislative moves. California, New York, Illinois and others are each preparing AI regulation, and seeing Colorado's retreat they'll split two ways. One camp says "see, too strong and it can't survive" and dials down their own bills; the other says "Colorado retreated, so we'll be the real first strong regulation" and differentiates. The first domino's retreat shakes the direction of the dominoes behind it.
The federal counter matters too. What Polis kept stressing was "federal unified regulation over a state-by-state patchwork." When state laws retreat or diverge, the case for "let the feds set one standard" grows. But federal rules often get agreed weaker than state laws, so "federal unification" doesn't automatically mean "stronger regulation." It could instead turn into a preemption fight where the feds' looser standard overwrites states' stronger provisions.
The citizen/consumer counter likely shifts from "legislation to litigation." When the dedicated AI anti-discrimination law weakens, they can pull in existing general anti-discrimination and consumer-protection laws and fight it out in individual lawsuits — case law filling the space the dedicated regulation vacated. But that's after-the-fact remedy, weak on prevention, and puts a heavy proof burden on individuals against giant companies. Which is why civil-society groups take the legislative retreat that much harder.
So what actually changes
If you're a company using AI tools, it's a moment to exhale. With Colorado's heavy duties — impact assessments, risk management — removed, the looming compliance burden drops sharply. But don't get complacent. The effective date lives on at January 2027, other states or the feds could bring stronger rules, and general anti-discrimination law remains — so this absolutely does not mean "AI discrimination is fine now." The burden was deferred, not erased.
If you work in HR, fintech, or health-tech, read this as "you got time to prepare," not "stop preparing." Impact assessments and discrimination checks are good practice even unmandated, and they hold value for reputational and litigation-risk management. Now, with regulation lighter, is actually the right time to build the framework voluntarily rather than under coercion. When the next regulatory wave hits, the side that prepared first pays less.
If you care about policy and citizens, this is a weathervane for "where American-style AI regulation goes." The first comprehensive law emptying its core right before launch may signal that the U.S. is tilting toward "market self-governance + transparency disclosure + after-the-fact litigation" rather than "EU-style ex-ante mandates." But it's still pre-effective and other state and federal cards remain, so it's early to conclude. With prevention responsibility pulled from the law, the key is watching what fills that vacuum.
One step further — the deep gap between "writing" and "enforcing"
The deepest lesson here is the enormous gap between writing a law and enforcing one. Colorado passed a law carrying 2024's ideals, but as 2026 enforcement loomed, it effectively admitted the reality to support those ideals — business acceptance, administrative enforcement capacity, social consensus — hadn't grown enough. AI regulation is hard partly because the technology changes fast, but more fundamentally because society hasn't yet ripened a consensus on "what counts as discrimination, and who's responsible."
The other thing to watch closely is the trap of the word "transparency." The transparency-disclosure clauses left in the amended law sound reasonable at first — "at least it tells you AI is in use." But "telling" and "preventing" are completely different regulatory intensities. If discrimination happens and only the fact that it happened gets disclosed, with no power to prevent or fix it, transparency can edge toward an indulgence. The real question is whether there's a follow-on mechanism to assign responsibility based on the disclosed information — and that's exactly what weakened in this retreat.
In the end, the question Colorado's retreat poses isn't "regulate AI or not." It's "in what manner, and on whose burden, do you regulate?" Make companies check in advance, or make victims fight it out in court after the fact? America just stepped one foot toward the latter at that fork, and June 30 is the day that first signal came into focus — a lightened law taking the place of the strong one that almost took effect.
🥄 Three Things You're Probably Wondering
— So is the Colorado AI Act repealed? No. Not repealed — retreated. The effective date moved to January 2027, and it survives with core duties stripped, centered on transparency and disclosure. The law exists, but the teeth that actively prevented discrimination have largely been pulled.
— Does this affect other states? Likely. Colorado is America's first model, so other states reference it. Some may seeing the retreat soften their own bills; others may aim to be "the real first strong regulation." Which way prevails remains to be seen.
— So is AI discrimination legal now? Not at all. Only the AI-specific anti-discrimination duty weakened; existing general anti-discrimination and consumer-protection law is unchanged. But with the AI-specific ex-ante prevention removed, the method of stopping discrimination tilted from "prevention" toward "after-the-fact litigation." More accurate to say the tool for stopping it got weaker.
Sources
- Colorado AI Act Amended and Effective Date Delayed — Hunton Andrews Kurth
- Colorado Legislature Passes Bill to Repeal and Replace Colorado AI Act — Troutman Pepper
- Colorado Artificial Intelligence Act (SB 24-205) — Colorado General Assembly
- Office of Governor Jared Polis — Colorado
- EU AI Act overview — European Commission
Numbers and criteria are as of announcement and may change. For legal matters, consult a professional.
출처
관련 기사

Stanford AI Index 2026: Has China Really Caught Up with the US?

Trump Scrapped His AI Executive Order Hours Before Signing — Two Phone Calls From Musk, Zuckerberg and Sacks Did It

Congress Just Dropped the 'Great American AI Act' Draft — 269 Pages, a 3-Year Freeze on State AI Laws, and Forced Frontier-Model Disclosure
AI 트렌드를 앞서가세요
매일 아침, 엄선된 AI 뉴스를 받아보세요. 스팸 없음. 언제든 구독 취소.