On August 28, 2025, Colorado Governor Jared Polis signed Senate Bill 25B-004 (Bill) into law, extending the compliance deadline of the Colorado Artificial Intelligence Act (CAIA) from February 1, 2026, to June 30, 2026.
The Bill does not alter the CAIA’s substantive requirements. But it remains uncertain whether the Colorado legislature will introduce further amendments to the CAIA during the upcoming regular legislative session before the CAIA’s obligations take effect. Since its enactment, the CAIA has drawn criticism for its broad definition of “high-risk artificial intelligence system” and rigorous compliance mandates. Both Governor Polis and Colorado Attorney General Phil Weiser have urged lawmakers to amend the CAIA, cautioning that the statute, in its current form, may impose burdensome and premature obligations on businesses, potentially stifling innovation and placing Colorado at a competitive disadvantage in the emerging artificial intelligence sector.
Although the Bill provides businesses with additional time to prepare for compliance, it also creates uncertainty about potential legislative changes, complicating businesses’ strategic planning. Alston & Bird’s Privacy, Cyber & Data Strategy Team will closely monitor the legislative development surrounding the CAIA and provide timely updates. Please contact us if you have any questions.
