{"slug":"us-colorado-ai-act-deployer-disclosure-to-attorney-general","id":"AIPT-OBL-0092","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0092","title":"Deployers must notify the Attorney General of discovered algorithmic discrimination","short_title":"Deployer notice to the Attorney General","category":"incident_handling","summary":"If a deployer discovers that a high-risk AI system it uses has caused algorithmic discrimination, it must send a notice to the Colorado Attorney General within 90 days of the discovery, in the form the Attorney General prescribes, without unreasonable delay.\n","practical_action":"Add a 90-day Attorney General notification step to the incident playbook for consequential-decision systems.\n","is_binding":true,"applies_from":null,"section":null,"source_reference":"C.R.S. 6-1-1703(7)","official_source_url":"https://leg.colorado.gov/bills/sb24-205","review_status":"pending_review","confidence_level":"high","last_verified_at":null,"reviewed_by":null,"actors":["deployer"],"sectors":["employment","financial_services","healthcare","education","public_services"],"use_cases":["hiring_and_hr","health","finance_and_credit","education","public_services"],"applicability":[{"description":"Deployers of high-risk AI systems that discover the system has caused algorithmic discrimination.","actors":["deployer"],"conditions":null}],"evidence_examples":[{"title":"Attorney General notification record","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MANAGE 4.3","note":"Incident response and reporting.","confidence_level":"medium","is_original":true},{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A.8.4","note":"Communication of incidents.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"ai-incident-management-and-reporting","title":"AI incident management and regulatory reporting","kind":"process","relationship":"satisfies","note":"Discrimination discovery treated as a reportable incident with the statutory clock.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-incident-management-and-reporting"}],"url":"https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-disclosure-to-attorney-general","policy":{"slug":"us-colorado-ai-act","title":"Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)","status":"repealed","jurisdiction":"us-colorado","url":"https://aipolicytracker.org/policies/us-colorado-ai-act"}}