{"slug":"us-colorado-ai-act-deployer-reasonable-care","id":"AIPT-OBL-0090","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0090","title":"Deployers must use reasonable care to avoid algorithmic discrimination","short_title":"Deployer duty of reasonable care","category":"risk_management","summary":"A deployer of a high-risk AI system must use reasonable care to protect consumers from known or reasonably foreseeable risks of algorithmic discrimination. A deployer that runs the required risk-management programme, completes impact assessments, gives consumer notices and makes the required disclosures benefits from a rebuttable presumption of reasonable care; some deployers with fewer than 50 employees are relieved of parts of the programme and assessment duties when they rely on the developer's impact assessment.\n","practical_action":"Treat each consequential-decision use of AI as a governed system with an owner, a risk record and the statutory paperwork so the presumption is available.\n","is_binding":true,"applies_from":null,"section":null,"source_reference":"C.R.S. 6-1-1703(1)","official_source_url":"https://leg.colorado.gov/bills/sb24-205","review_status":"pending_review","confidence_level":"high","last_verified_at":null,"reviewed_by":null,"actors":["deployer"],"sectors":["employment","financial_services","healthcare","education","public_services"],"use_cases":["hiring_and_hr","health","finance_and_credit","education","public_services"],"applicability":[{"description":"Deployers doing business in Colorado that use a high-risk AI system to make or substantially inform consequential decisions.","actors":["deployer"],"conditions":null}],"evidence_examples":[{"title":"Deployer compliance checklist per high-risk system","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.1, MANAGE 1.3","note":"Legal requirements and risk treatment for deployed systems.","confidence_level":"medium","is_original":true},{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 6.1.2; Annex A.9.2","note":"Risk assessment and responsible-use processes.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"ai-governance-policy-and-accountability","title":"AI governance policy and accountability structure","kind":"policy","relationship":"satisfies","note":"Ownership and the standard of care documented for each system.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-governance-policy-and-accountability"},{"slug":"ai-risk-assessment","title":"AI risk assessment and lifecycle risk register","kind":"process","relationship":"supports","note":"Discrimination risk identified for each consequential-decision use.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-risk-assessment"}],"url":"https://aipolicytracker.org/obligations/us-colorado-ai-act-deployer-reasonable-care","policy":{"slug":"us-colorado-ai-act","title":"Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)","status":"repealed","jurisdiction":"us-colorado","url":"https://aipolicytracker.org/policies/us-colorado-ai-act"}}