Formation & Entity Compliance
Colorado's Artificial Intelligence Act (SB 24-205), effective June 30, 2026, establishes the nation's first comprehensive regulatory framework for high-risk AI systems used in consequential decisions affecting consumers. The law applies to both developers and deployers of AI systems in employment, financial services, housing, insurance, and education.
Compliance Requirements
- Risk Management Program: Implement reasonable risk management policies proportionate to enterprise size and AI system nature
- Impact Assessments: Complete and document impact assessments for all high-risk AI systems before deployment and annually thereafter
- Consumer Disclosure: Provide clear notice to consumers before AI makes or substantially contributes to consequential decisions
- Adverse Action Process: Establish procedures to notify consumers of AI-driven adverse decisions with factor explanations
- Documentation: Maintain records of AI deployments, risk assessments, and consumer disclosures for at least three years
Enforcement & Safe Harbor
Enforcement authority rests exclusively with the Colorado Attorney General. Businesses can establish an affirmative defense by demonstrating compliance with recognized AI risk management frameworks such as NIST AI RMF. Private right of action is excluded.
Colorado House Bill 24-1137, effective July 1, 2025, modernizes registered agent requirements and introduces new periodic report obligations for business entities.
Key Changes
- Enhanced Agent Standards: Registered agents must maintain a physical address in Colorado (P.O. boxes no longer sufficient)
- Periodic Report Fee: New $25 annual periodic report filing fee for all business entities, effective with 2026 filings
- Updated Deadlines: Periodic reports now due within 90 days of anniversary of entity's formation date
- Digital Service: Secretary of State now accepts electronic service of process for entities in good standing
The One Big Beautiful Bill Act (OBBBA), signed July 4, 2025, repealed beneficial ownership information (BOI) reporting requirements for domestic reporting companies, eliminating a significant compliance burden for millions of small businesses.
What Changed
- Domestic Companies Exempt: U.S.-formed entities no longer required to file beneficial ownership reports with FinCEN
- Foreign Entities Still Subject: Foreign reporting companies (formed under foreign law, registered in U.S.) remain subject to BOI reporting
- No Retroactive Filings: Domestic companies that filed BOI reports are not required to update or maintain those filings
- Database Maintained: FinCEN will maintain existing BOI database but will not accept new domestic company filings
The FTC announced annual Hart-Scott-Rodino Act threshold adjustments on January 14, 2026, effective February 17, 2026.
2026 Threshold Changes
| Threshold | 2025 | 2026 |
|---|---|---|
| Size-of-Transaction (minimum) | $126.4 million | $133.9 million |
| Size-of-Transaction (no size-of-party) | $505.8 million | $535.5 million |
| Size-of-Party (larger) | $252.9 million | $267.8 million |
| Size-of-Party (smaller) | $25.3 million | $26.8 million |