Artificial Intelligence Policy Tracker

Deployers must publish a statement about the high-risk AI systems they use

Download: JSON · MarkdownUnder Colorado AI Act, C.R.S. 6-1-1703(5)

Pending review · linked to the official source, waiting for a reviewer to confirm it (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
No longer in force: repealed · Signed 17 May 2024; its effective date was moved from 1 February 2026 to 30 June 2026 by SB 25B-004 (August 2025). Before that date arrived, SB 26-189, signed on 14 May 2026, repealed and re-enacted the framework as a narrower automated-decision-making-technology law that applies from 1 January 2027. This act therefore never took effect; see the SB 26-189 record. Recorded on 26 September 2026 from secondary reporting, pending review against the enrolled bill. · official source last checked
On this page 9 sections

In brief

Deployers must publish a statement about the high-risk AI systems they use is a legal requirement under the Colorado AI Act in Colorado (United States) (C.R.S. 6-1-1703(5)). The record carries 1 evidence example and mappings to 2 frameworks. In practice: Publish an AI-use page listing high-risk systems in plain language and review it whenever a system is added or changed.

Instrument
Colorado AI Act
Nature
Legal requirement
Source reference
C.R.S. 6-1-1703(5)
Who it binds
Deployer / user organisation
Evidence examples
1
Framework mappings
NIST AI Risk Management Framework 1.0, ISO/IEC 42001:2023
Controls that meet it
2
Official source
Open official text
Verification
Pending review · source-linked

What does it require?

A deployer must make available on its website, or in another public way, a clear and readily available statement summarising the types of high-risk AI systems it currently deploys, how it manages known or reasonably foreseeable risks of algorithmic discrimination from those systems, and the nature, source and extent of the information it collects and uses. The statement must be updated periodically.

Practical action

Publish an AI-use page listing high-risk systems in plain language and review it whenever a system is added or changed.

Who does it apply to?

Deployers of high-risk AI systems, subject to the small-deployer relief in 6-1-1703(6).

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

  • satisfiesProcessProduct owner · at launch and on material change
    AI interaction and use disclosure notices

    Serves 18 recorded duties · evidence: AI interaction or use notice, Notice catalogue, Notice wording approval

    Organisation-level public statement rather than per-interaction notice.

  • supportsProcessAI governance lead · continuous
    AI system inventory and classification

    Serves 11 recorded duties · evidence: AI system register, Risk-tier classification sign-off, AI intake and classification procedure

    Source of the list of deployed high-risk systems.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

All 9 templates that cover it →

What evidence would a reviewer expect?

Evidence examples
EvidenceTypeNotes
Public statement on high-risk AI usedocument

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every Colorado (United States) duty mapped this way →

Framework mappings table
FrameworkReferenceNoteConfidence
NIST AI RMF 1.0GOVERN 4.2, MAP 5.2Transparency about deployed systems and their impacts.medium
ISO/IEC 42001:2023Annex A.8.5Information for interested parties.medium

Frequently asked questions

Is this a legal requirement?

Yes. It is a legal requirement under Colorado AI Act (C.R.S. 6-1-1703(5)).

Who must comply with this obligation?

Deployers of high-risk AI systems, subject to the small-deployer relief in 6-1-1703(6).

What evidence shows compliance?

A reviewer would expect: Public statement on high-risk AI use.

Which frameworks map to this obligation?

It is mapped to NIST AI Risk Management Framework 1.0 GOVERN 4.2, MAP 5.2, ISO/IEC 42001:2023 Annex A.8.5. These are editorial crosswalks with a stated confidence, not official mappings.

Which controls satisfy this obligation?

AI interaction and use disclosure notices; AI system inventory and classification.

What should an organisation do in practice?

Publish an AI-use page listing high-risk systems in plain language and review it whenever a system is added or changed.

Cite this record

AIPolicyTracker (2026). “Deployers must publish a statement about the high-risk AI systems they use (Colorado AI Act)” [AIPT-OBL-0091, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0091 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0091: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: SB24-205 Consumer Protections for Artificial Intelligence, Colorado General Assembly, https://leg.colorado.gov/bills/sb24-205.

BibTeX
@misc{aipolicytracker2026_deployersmustpublishasta,
  author       = {{AIPolicyTracker}},
  title        = {{Deployers must publish a statement about the high-risk AI systems they use (Colorado AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-public-statement}},
  url          = {https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-public-statement},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Similar obligations in other instruments

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.