Notify consumers and explain adverse consequential decisions
Download: JSON · MarkdownUnder Colorado AI Act, C.R.S. 6-1-1703(4)
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 9 sections
In brief
Notify consumers and explain adverse consequential decisions is a legal requirement under the Colorado AI Act in Colorado (United States) (C.R.S. 6-1-1703(4)). Before a high-risk system makes a consequential decision, deployers must notify the consumer that AI is used, describe its purpose and nature, and provide contact and opt-out information where applicable.
- Instrument
- Colorado AI Act
- Jurisdiction
- Colorado (United States)
- Nature
- Legal requirement
- Source reference
- C.R.S. 6-1-1703(4)
- Who it binds
- Deployer / user organisation
- Evidence examples
- 1
- Framework mappings
- NIST AI Risk Management Framework 1.0
- Controls that meet it
- 2
- Official source
- Open official text
- Verification
- Pending review · source-linked
What does it require?
Before a high-risk system makes a consequential decision, deployers must notify the consumer that AI is used, describe its purpose and nature, and provide contact and opt-out information where applicable. After an adverse decision they must state the principal reasons, the data used and its sources, and offer an opportunity to correct data and to appeal for human review where feasible.
Practical action
Add pre-decision AI notices and an adverse-decision explanation and appeal workflow.
Who does it apply to?
Deployers making consequential decisions with high-risk AI.
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesProcessProduct owner · at launch and on material changeAI interaction and use disclosure notices
Serves 18 recorded duties · evidence: AI interaction or use notice, Notice catalogue, Notice wording approval
Pre-decision notice with purpose, nature and contact details.
-
satisfiesProcessCustomer operations lead · once per ai systemDecision explanation, human review and appeal route
Serves 12 recorded duties · evidence: Adverse-decision explanation template, AI decision challenge and human review procedure, Challenge and reversal log
Adverse-decision reasons, data correction and appeal for human review.
Templates that cover this duty
Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.
- AI Agent Registry and Permission Matrix
Register · XLSX and DOCX · v6
- EU AI Act Article 50 Transparency Kit
Kit · DOCX and XLSX · v32
- NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk
Crosswalk · XLSX · v3
- AI Model Card
Kit · DOCX and XLSX · v4
What evidence would a reviewer expect?
| Evidence | Type | Notes |
|---|---|---|
| Consumer notice and adverse-action explanation templates | document |
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
See every Colorado (United States) duty mapped this way →
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | GOVERN 5.x, MANAGE 4.x | Recourse and communication. | medium |
Frequently asked questions
Is this a legal requirement?
Yes. It is a legal requirement under Colorado AI Act (C.R.S. 6-1-1703(4)).
Who must comply with this obligation?
Deployers making consequential decisions with high-risk AI.
What evidence shows compliance?
A reviewer would expect: Consumer notice and adverse-action explanation templates.
Which frameworks map to this obligation?
It is mapped to NIST AI Risk Management Framework 1.0 GOVERN 5.x, MANAGE 4.x. These are editorial crosswalks with a stated confidence, not official mappings.
Which controls satisfy this obligation?
AI interaction and use disclosure notices; Decision explanation, human review and appeal route.
What should an organisation do in practice?
Add pre-decision AI notices and an adverse-decision explanation and appeal workflow.
Cite this record
AIPolicyTracker (2026). “Notify consumers and explain adverse consequential decisions (Colorado AI Act)” [AIPT-OBL-0086, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0086 (accessed 27 October 2026). Data licensed CC BY 4.0.
Permanent id AIPT-OBL-0086: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: SB24-205 Consumer Protections for Artificial Intelligence, Colorado General Assembly, https://leg.colorado.gov/bills/sb24-205.
BibTeX
@misc{aipolicytracker2026_notifyconsumersandexplai,
author = {{AIPolicyTracker}},
title = {{Notify consumers and explain adverse consequential decisions (Colorado AI Act)}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/obligations/us-colorado-consumer-notice-and-adverse-decision-explanation}},
url = {https://aipolicytracker.org/obligations/us-colorado-consumer-notice-and-adverse-decision-explanation},
urldate = {2026-10-27},
note = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}
Change history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Similar obligations in other instruments
- Employers must inform workers and their representatives before using high-risk AI at work — EU AI Act, European Union
- Disclose AI interaction and label synthetic content — EU AI Act, European Union
- Deployers must tell natural persons that a high-risk AI system is used in decisions about them — EU AI Act, European Union
- Deployers of emotion recognition or biometric categorisation must inform exposed persons — EU AI Act, European Union
- Deployers must disclose deepfakes and AI-generated text published on matters of public interest — EU AI Act, European Union
- Providers of generative AI must mark synthetic output as artificially generated in a machine-readable way — EU AI Act, European Union
- Deployers must explain individual decisions taken with high-risk AI on request — EU AI Act, European Union
- Frontier developers must publish a transparency report before deploying a new frontier model — California SB 53, California (United States)
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.