# Deployers must complete impact assessments for high-risk AI

- **Record type**: Obligation
- **Instrument**: Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)
- **Jurisdiction**: Colorado (United States)
- **Category**: impact_assessment
- **Binding**: Yes
- **Provision**: C.R.S. 6-1-1703(3)

## In brief

Deployers must complete impact assessments for high-risk AI is a legal requirement under the Colorado AI Act in Colorado (United States) (C.R.S. 6-1-1703(3)). The record carries 1 evidence example and mappings to 2 frameworks. In practice: Build an impact-assessment template aligned with the statutory elements and calendar the annual refresh.

## What the duty requires

Deployers must complete an impact assessment before deployment, annually, and within 90 days of any intentional and substantial modification, covering purpose, risks of algorithmic discrimination and mitigation, data categories, performance metrics, transparency measures and post-deployment monitoring, and retain assessments for at least three years.

## What an organisation does about it

Build an impact-assessment template aligned with the statutory elements and calendar the annual refresh.

## Controls that meet this duty

- AI impact and fundamental-rights impact assessment (satisfies): https://aipolicytracker.org/controls/ai-impact-assessment
- Post-deployment monitoring and drift detection (supports): https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection

## Parent instrument

- Colorado Senate Bill 24-205: Consumer Protections for Artificial Intelligence (Colorado AI Act)
  - Record: https://aipolicytracker.org/policies/us-colorado-ai-act
  - Context file: https://aipolicytracker.org/policies/us-colorado-ai-act.md

## Provenance

- **Permanent id**: AIPT-OBL-0085 (https://aipolicytracker.org/id/AIPT-OBL-0085; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/obligations/us-colorado-deployer-impact-assessment
- **Official source**: https://leg.colorado.gov/bills/sb24-205
- **Provision**: C.R.S. 6-1-1703(3)
- **Review status**: pending review
- **Confidence**: medium
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Deployers must complete impact assessments for high-risk AI (Colorado AI Act)" [AIPT-OBL-0085, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0085 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.