# Developers must notify the Attorney General and deployers of discovered algorithmic discrimination

- **Record type**: Obligation
- **Instrument**: Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)
- **Jurisdiction**: Colorado (United States)
- **Category**: incident_handling
- **Binding**: Yes
- **Applies from**: 2026-06-30
- **Provision**: C.R.S. 6-1-1702(5)

## What the duty requires

Within 90 days after a developer discovers, through ongoing testing or a credible report from a deployer, that a high-risk AI system it developed has caused or is reasonably likely to have caused algorithmic discrimination, it must disclose this to the Colorado Attorney General and to all known deployers or other developers of the system, without unreasonable delay.

## What an organisation does about it

Route bias findings and deployer complaints into an incident process with a 90-day regulatory and customer notification clock.

## Controls that meet this duty

- AI incident management and regulatory reporting (satisfies): https://aipolicytracker.org/controls/ai-incident-management-and-reporting
- Post-deployment monitoring and drift detection (supports): https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection

## Parent instrument

- Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)
  - Record: https://aipolicytracker.org/policies/us-colorado-ai-act
  - Context file: https://aipolicytracker.org/policies/us-colorado-ai-act.md

## Provenance

- **Record page**: https://aipolicytracker.org/obligations/us-colorado-ai-act-developer-disclosure-to-attorney-general
- **Official source**: https://leg.colorado.gov/bills/sb24-205
- **Provision**: C.R.S. 6-1-1702(5)
- **Review status**: pending review
- **Confidence**: high
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-09-24
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.