Deployers must use reasonable care to avoid algorithmic discrimination

Practical action

Treat each consequential-decision use of AI as a governed system with an owner, a risk record and the statutory paperwork so the presumption is available.

Who does it apply to?

Deployers doing business in Colorado that use a high-risk AI system to make or substantially inform consequential decisions.

Actors

Deployer / user organisation

Sectors

Employment and HRFinancial services and creditHealthcare and life sciencesEducation and trainingPublic services and government

Use cases

AI in hiring and employmentAI in healthcareAI in finance, credit and insuranceAI in educationAI in public services

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

• satisfiesPolicyExecutive sponsor for AI · annual
  AI governance policy and accountability structure

  Serves 16 recorded duties · evidence: AI policy, Board or executive approval of the AI policy, AI governance forum minutes

  Ownership and the standard of care documented for each system.

• supportsProcessAI system owner · once per ai system
  AI risk assessment and lifecycle risk register

  Serves 12 recorded duties · evidence: AI system risk assessment, Per-system AI risk register, Residual-risk acceptance

  Discrimination risk identified for each consequential-decision use.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

• AI Risk Register (MIT AI Risk Repository taxonomy)

  Register · XLSX · v4

• AI Impact Assessment

  Assessment · DOCX and XLSX · v5

• ISO/IEC 42001 Gap Assessment and Statement of Applicability

  Assessment · XLSX · v3

• NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk

  Crosswalk · XLSX · v5

All 6 templates that cover it →

What evidence would a reviewer expect?

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every Colorado (United States) duty mapped this way →

Frequently asked questions

Cite this record

AIPolicyTracker (2026). “Deployers must use reasonable care to avoid algorithmic discrimination (Colorado AI Act)” [AIPT-OBL-0090, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0090 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0090: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: SB24-205 Consumer Protections for Artificial Intelligence, Colorado General Assembly, https://leg.colorado.gov/bills/sb24-205.

@misc{aipolicytracker2026_deployersmustusereasonab,
  author       = {{AIPolicyTracker}},
  title        = {{Deployers must use reasonable care to avoid algorithmic discrimination (Colorado AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-reasonable-care}},
  url          = {https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-reasonable-care},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

Similar obligations in other instruments

• Operators of high-impact AI must establish and operate a risk management plan — AI Basic Act, South Korea
• Developers must use reasonable care to avoid algorithmic discrimination — Colorado AI Act, Colorado (United States)
• Apply minimum risk-management practices to high-impact AI — OMB M-25-21, United States
• Establish a risk management system for high-risk AI — EU AI Act, European Union
• Deployers must implement a risk management policy and programme — Colorado AI Act, Colorado (United States)
• Ensure AI systems are safe, secure and robust throughout their lifecycle — UK AI regulation framework, United Kingdom (voluntary)
• Prioritise, respond to and monitor AI risks (Manage) — NIST AI RMF, United States (voluntary)