Deployers must notify the Attorney General of discovered algorithmic discrimination
Context fileUnder Colorado AI Act, C.R.S. 6-1-1703(7)
What does it require?
If a deployer discovers that a high-risk AI system it uses has caused algorithmic discrimination, it must send a notice to the Colorado Attorney General within 90 days of the discovery, in the form the Attorney General prescribes, without unreasonable delay.
Practical action
Add a 90-day Attorney General notification step to the incident playbook for consequential-decision systems.
Who does it apply to?
Deployers of high-risk AI systems that discover the system has caused algorithmic discrimination.
Applies from:
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesProcessIncident coordinator · continuousAI incident management and regulatory reporting
Serves 14 recorded duties · evidence: AI incident response playbook, AI incident record, Incident report to an authority
Discrimination discovery treated as a reportable incident with the statutory clock.
What evidence would a reviewer expect?
| Evidence | Type | Notes |
|---|---|---|
| Attorney General notification record | record |
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
See every Colorado (United States) duty mapped this way →
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | MANAGE 4.3 | Incident response and reporting. | medium |
| ISO/IEC 42001:2023 | Annex A.8.4 | Communication of incidents. | medium |
Cite this record
AIPolicyTracker (2026). “Deployers must notify the Attorney General of discovered algorithmic discrimination (Colorado AI Act)”. https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-disclosure-to-attorney-general (accessed 24 September 2026). Data licensed CC BY 4.0.
Cite the official text alongside it: SB24-205 Consumer Protections for Artificial Intelligence, Colorado General Assembly, https://leg.colorado.gov/bills/sb24-205.
Similar obligations in other instruments
- Report serious incidents to market surveillance authorities — EU AI Act, European Union
- Providers must take corrective action and inform the supply chain about non-conforming high-risk AI — EU AI Act, European Union
- Providers of systemic-risk GPAI models must track and report serious incidents to the AI Office — EU AI Act, European Union
- Implement reasonable security safeguards and notify breaches — India DPDP Act, India
- Report critical safety incidents to the Office of Emergency Services — California SB 53, California (United States)
- Developers must notify the Attorney General and deployers of discovered algorithmic discrimination — Colorado AI Act, Colorado (United States)
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.