Keep records of consequential decisions influenced by the technology for three years
Download: JSON · MarkdownUnder Colorado ADMT law (SB 26-189)
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 7 sections
In brief
Keep records of consequential decisions influenced by the technology for three years is a legal requirement under the Colorado ADMT law (SB 26-189) in Colorado (United States). Deployers must retain records showing how automated decision-making technology was used in consequential decisions, for three years, according to secondary reporting on the enrolled bill. It applies from 1 January 2027.
- Instrument
- Colorado ADMT law (SB 26-189)
- Jurisdiction
- Colorado (United States)
- Nature
- Legal requirement
- Applies from
- 1 January 2027
- Who it binds
- Deployer / user organisation
- Controls that meet it
- 1
- Official source
- Open official text
- Verification
- Pending review · source-linked
What does it require?
Deployers must retain records showing how automated decision-making technology was used in consequential decisions, for three years, according to secondary reporting on the enrolled bill.
Practical action
Log each decision, the tool used, inputs relied on and the notices sent, with a three-year retention rule.
Who does it apply to?
Applies from:
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesTechnical measureEngineering lead · continuousAutomatic event logging and record retention
Serves 11 recorded duties · evidence: AI system event logs, Log schema and retention standard, Log integrity and retention check
Decision records retained for the statutory period.
Templates that cover this duty
Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.
- AI System Inventory
Register · XLSX and DOCX · v7
- AI Agent Registry and Permission Matrix
Register · XLSX and DOCX · v7
- Colorado ADMT Law (SB 26-189) Notices
Kit · DOCX and XLSX · v3
- AI System Technical Documentation
Kit · DOCX and XLSX · v4
Frequently asked questions
Is this a legal requirement?
Yes. It is a legal requirement under Colorado ADMT law (SB 26-189).
When does this obligation apply?
It applies from 1 January 2027.
Which controls satisfy this obligation?
Automatic event logging and record retention.
What should an organisation do in practice?
Log each decision, the tool used, inputs relied on and the notices sent, with a three-year retention rule.
Cite this record
AIPolicyTracker (2026). “Keep records of consequential decisions influenced by the technology for three years (Colorado ADMT law (SB 26-189))” [AIPT-OBL-0097, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0097 (accessed 12 November 2026). Data licensed CC BY 4.0.
Permanent id AIPT-OBL-0097: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: SB26-189 Automated Decision-Making Technology, Colorado General Assembly, https://leg.colorado.gov/bills/sb26-189.
BibTeX
@misc{aipolicytracker2026_keeprecordsofconsequenti,
author = {{AIPolicyTracker}},
title = {{Keep records of consequential decisions influenced by the technology for three years (Colorado ADMT law (SB 26-189))}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/obligations/us-colorado-admt-record-keeping}},
url = {https://aipolicytracker.org/obligations/us-colorado-admt-record-keeping},
urldate = {2026-11-12},
note = {Data licensed CC BY 4.0. Accessed 12 November 2026}
}
Change history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Similar obligations in other instruments
- Design high-risk systems to log events automatically — EU AI Act, European Union
- Submit risk assessment information to the California Privacy Protection Agency each year — California CPPA automated decision-making rules, California (United States)
- Providers must keep high-risk AI documentation for ten years — EU AI Act, European Union
- Providers must retain automatically generated logs under their control — EU AI Act, European Union
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.