Keep records of consequential decisions influenced by the technology for three years
Context fileUnder Colorado ADMT law (SB 26-189)
In brief
Keep records of consequential decisions influenced by the technology for three years is a legal requirement under the Colorado ADMT law (SB 26-189) in Colorado (United States). Deployers must retain records showing how automated decision-making technology was used in consequential decisions, for three years, according to secondary reporting on the enrolled bill. It applies from 1 January 2027.
- Instrument
- Colorado ADMT law (SB 26-189)
- Jurisdiction
- Colorado (United States)
- Nature
- Legal requirement
- Applies from
- 1 January 2027
- Who it binds
- Deployer / user organisation
- Controls that meet it
- 1
- Official source
- Open official text
- Verification
- Source-linked
What does it require?
Deployers must retain records showing how automated decision-making technology was used in consequential decisions, for three years, according to secondary reporting on the enrolled bill.
Practical action
Log each decision, the tool used, inputs relied on and the notices sent, with a three-year retention rule.
Who does it apply to?
Applies from:
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesTechnical measureEngineering lead · continuousAutomatic event logging and record retention
Serves 9 recorded duties · evidence: AI system event logs, Log schema and retention standard, Log integrity and retention check
Decision records retained for the statutory period.
Templates that cover this duty
Generated from the records, free, no account: this duty is cited in each file with its source reference and a link back here.
- AI System Inventory
Register · XLSX and DOCX · v1
- AI Agent Registry and Permission Matrix
Register · XLSX and DOCX · v1
- Colorado AI Act Notices
Kit · DOCX and XLSX · v1
- AI System Technical Documentation
Kit · DOCX and XLSX · v1
Frequently asked questions
- Is this a legal requirement?
- Yes. It is a legal requirement under Colorado ADMT law (SB 26-189).
- When does this obligation apply?
- It applies from 1 January 2027.
- Which controls satisfy this obligation?
- Automatic event logging and record retention.
- What should an organisation do in practice?
- Log each decision, the tool used, inputs relied on and the notices sent, with a three-year retention rule.
Cite this record
AIPolicyTracker (2026). “Keep records of consequential decisions influenced by the technology for three years (Colorado ADMT law (SB 26-189))”. https://aipolicytracker.org/obligations/us-colorado-admt-record-keeping (accessed 27 September 2026). Data licensed CC BY 4.0.
Cite the official text alongside it: SB26-189 Automated Decision-Making Technology, Colorado General Assembly, https://leg.colorado.gov/bills/sb26-189.
Similar obligations in other instruments
- Design high-risk systems to log events automatically — EU AI Act, European Union
- Providers must keep high-risk AI documentation for ten years — EU AI Act, European Union
- Providers must retain automatically generated logs under their control — EU AI Act, European Union
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.
Frequently asked questions
- Is this a legal requirement?
- Yes. It is a legal requirement under Colorado ADMT law (SB 26-189).
- When does this obligation apply?
- It applies from 1 January 2027.
- Which controls satisfy this obligation?
- Automatic event logging and record retention.
- What should an organisation do in practice?
- Log each decision, the tool used, inputs relied on and the notices sent, with a three-year retention rule.