Will Colorado's AI rules take effect before February 2027? — Yes

- [2026-05-14] Gov. Polis signed SB 26-189. It repeals and reenacts SB 24-205 as the ADMT Act and takes effect Jan 1, 2027. The AG must adopt rules clarifying the post-adverse-outcome disclosure requirements by Jan 1, 2027. https://leg.colorado.gov/bills/sb26-189 - [2026-05 to 2026-07-13] Pre-rulemaking phase. Informal public input was collected through July 13, 2026. A considerations paper was published. https://coag.gov/ai/ - [2026-08-11] The Dept. of Law filed the proposed ADMT and Chatbot Safety rules (4 CCR 904-6) with the Secretary of State. The filing included the notice of hearing and the statement of basis. Rule 6 covers adverse-outcome disclosures. https://coag.gov/ai/ - [2026-09-04 and 2026-09-23] Written comments submitted by Sept 4 were to inform a revised draft. The revised draft was due around Sept 23, per a secondary source. https://hooglaw.com/ai-compliance/colorado-ag-admt-rulemaking-considerations.html - [2026-10-06] The Dept. of Law released an interim or revised draft of the rules and a cover page of additional considerations. The AG page confirms this. A law-firm summary says the revision settles the "materially influence" standard and changes the adverse-outcome contents. https://coag.gov/ai/ and https://www.cyberadviserblog.com/2026/10/revised-draft-rules-for-the-colorado-admt-act-and-conversational-ai-act-released/ (the second page returned 403 when fetched, so only its search snippet was read). - [2026-10-05] A law-firm note says the formal hearing is Oct 26, 2026 and the comment period closes that night at 11:59 pm MT. The AG page confirms the hearing: 10:00 am, 1300 Broadway, Denver, and by Zoom. https://www.mvalaw.com/data-points/colorados-proposed-admt-rules-what-businesses-need-to-know-now - [2026-10-12] As of today, no final or adopted rules have been found. The AG page lists only proposed and interim drafts. A secondary guide says final rules are not yet issued. https://coag.gov/ai/ - [2026-10-12] The hearing is the next scheduled event, on Oct 26. The rule-adoption and filing steps after it are not detailed in the sources I read. The target is adoption before Jan 1, 2027. A secondary source says the rules are scheduled to take effect Jan 1, 2027, together with the statute. https://hooglaw.com/ai-compliance/ - [2026-04-27] Litigation: xAI sued on Apr 9, 2026 (D. Colo., 1:26-cv-01515). The DOJ intervened on Apr 24. A stipulated order of Apr 27 suspended AG enforcement of SB 24-205. A preliminary-injunction motion is due within 28 days after final adoption of rules implementing SB 24-205 or any replacement legislation. That could be triggered by this rulemaking. The rules would likely still be adopted, since the question says pending challenges do not block enactment. https://www.mvalaw.com/data-points/colorados-proposed-admt-rules-what-businesses-need-to-know-now - [2026-06-12] Eckert Seamans said enforcement of SB 26-189 depends on the AG finishing rulemaking. It also said the April federal stay extends to the successor law. https://www.eckertseamans.com/legal-updates/colorado-repeals-and-replaces-its-landmark-ai-statute-what-businesses-need-to-know - [2026-05 to 2026-06] Law firms differ on how the Jan 1 date relates to the rules. Davis Polk and Skadden say the Act takes effect Jan 1, 2027 "provided" the AG completes rulemaking by then. The bill summary and the AG page state a plain Jan 1, 2027 effective date and a Jan 1 rule deadline. https://www.davispolk.com/insights/client-update/colorado-repeals-and-replaces-landmark-ai-act-publishes-draft-rules-public BOTTOM LINE: Rulemaking is on schedule. A revised draft came out Oct 6, the hearing is Oct 26, and the AG has to adopt by Jan 1, 2027. That leaves roughly 9 weeks after the hearing, so the main risks are timing slippage and whether "enacted" requires the rules to take legal effect, which depends on Colorado APA filing and publication steps that I could not confirm. The xAI litigation is a secondary risk. NOT FOUND: any adopted or final rule or Secretary of State effective-date filing. The Colorado APA post-hearing adoption and effective-date timeline for this rulemaking. Any extension or postponement of the hearing. Any recent ruling in the xAI case. The text of the Oct 6 revised draft, because that blog returned 403 and the PDF was not opened.

- [2026-05-14] Governor Polis signed SB 26-189, which repeals and re-enacts the 2024 AI Act. The act takes effect Jan 1, 2027. The AG must adopt rules clarifying the post-adverse-outcome disclosure requirements by Jan 1, 2027. Source: https://leg.colorado.gov/bills/sb26-189 - [2026-05-14] The bill passed the Senate 34–1 and the House 57–6. The legislature does not reconvene until Jan 11, 2027 , so no statutory delay is possible before then. Source: https://www.nixonpeabody.com/insights/alerts/2026/05/14/colorado-legislature-passes-bill-to-repeal-and-replace-the-colorado-ai-act - [2026-10-12] The AG's page confirms the process. The Department of Law filed proposed rules (4 CCR 904-6) with the Secretary of State on Aug 11, 2026. An interim draft was released Oct 6, 2026. The formal hearing is set for Oct 26, 2026 at 10:00 AM. Source: https://coag.gov/ai/ - [2026-08-11] The AG proposed a detailed Rule 6 on adverse-outcome disclosures. The Aug 11 filing and the Oct 26 hearing are both confirmed on the AG page. Source: https://hooglaw.com/ai-compliance/colorado-ag-admt-rulemaking-considerations.html - [2026-08-11] Law-firm summaries say the rules are "scheduled" to take effect Jan 1, 2027, with the statutes. This is the AG's stated target, not a confirmed adoption. Source: https://www.wiley.law/alert-Colorado-Proposes-Detailed-Rules-Implementing-New-ADMT-and-Chatbot-Laws - [2026-09-xx] Davis Polk reads the statute as taking effect Jan 1, 2027 "provided the Colorado Attorney General completes the requisite rulemaking process by that date." Source: https://www.davispolk.com/insights/client-update/colorado-repeals-and-replaces-landmark-ai-act-publishes-draft-rules-public - [2026-09-29] Eckert Seamans says enforcement depends on AG rulemaking and that a federal stay (April 2026, the xAI litigation) extends to successor legislation, making enforcement unlikely before late 2027. Under the question's rules, pending judicial challenges do not block "enactment". Source: https://www.eckertseamans.com/legal-updates/colorado-repeals-and-replaces-its-landmark-ai-statute-what-businesses-need-to-know - Base rate, my own general knowledge of the Colorado APA (not confirmed on a fetched page): after a hearing, the agency adopts rules and files them with the Secretary of State. They are published in the Colorado Register and become effective 20 days after publication unless a later date is stated. Rules are also subject to AG-office legal review. A hearing on Oct 26 leaves about 9 weeks to adopt and file, and the rules would likely be set to take effect Jan 1, 2027. - Reference class: the AG finalized the Colorado Privacy Act rules on a comparable schedule. I did not verify that in this session. The Colorado AI Act itself was delayed twice, but those were legislative delays. The legislature is out of session until Jan 11, 2027. - Ambiguity: "enacted" could mean the date of adoption or the effective date. If the rules are adopted in Nov–Dec 2026 with a Jan 1, 2027 effective date, both readings fall before Feb 1, 2027. The risk is slippage: a second comment round or a revised draft after Oct 26 could push adoption past Jan 2027, since the statute's deadline is not self-enforcing. BOTTOM LINE: The reference class (a statutory deadline of Jan 1, 2027, a hearing on Oct 26, and a legislature out of session) favors on-time adoption. The main risks are slippage of the final adoption or filing past Feb 1, a revised draft after the hearing, and ambiguity over whether "enacted" means adopted or effective. No existing forecast or odds were examined, as instructed. NOT FOUND: Colorado Register publication and effective-date mechanics confirmed on a fetched page; any historical record of how often Colorado AG rules finish by a statutory deadline; any AG statement on the expected adoption date; the contents of the Oct 6 interim draft (not read); any court action blocking the rules.

YES means: a Colorado AG rule implementing the ADMT Act (SB 26-189) that at minimum clarifies the post-adverse-outcome disclosure requirements is adopted and legally binding in Colorado before Feb 1, 2027. - [2026-10-12] The AG's rulemaking page (fetched) says the ADMT Act requires rules "before January 1, 2027". The page lists the Oct 26 hearing at 1300 Broadway, Room 1D, with Zoom registration. The Oct 6 interim draft is posted as a PDF. The statutory deadline and the hearing date are both live on the primary source. https://coag.gov/ai/ - [2026-10-12] Precedent 1 (Colorado Privacy Act, 2023): the hearing was Feb 1, 2023. The AG filed the final rules with the Secretary of State on Mar 15, 2023, about six weeks later. They were published Mar 25 and took effect Jul 1, 2023, the same day as the statute. The AG office describes its filing as following a legal and constitutional review. This is the same office and the same unit (Consumer Protection) doing the same kind of rulemaking. https://coag.gov/press-releases/3-15-23/ and https://coag.gov/colorado-privacy-act-rulemaking/ - [2026-10-12] Precedent 2 (CPA amendments, 2024): the AG adopted the rules Dec 5, 2024, after a November hearing. It filed them Dec 17, and they took effect Jan 30, 2025. That is about 5–6 weeks from hearing to adoption, and about 8 weeks from hearing to effectiveness. Applying the same lag to an Oct 26 hearing gives adoption around early December and effectiveness around late January. Both fall before Feb 1, though the effective date would be close to the line. https://www.wilmerhale.com/en/insights/blogs/wilmerhale-privacy-and-cybersecurity-law/20241219-colorado-ag-finalizes-new-rules-for-cpa - [2026-10-12] Mechanics: the AG has 180 days after the hearing to file adopted rules. Rules take effect 20 days after publication in the Colorado Register, unless the rules state a later date. The 2024 CPA amendments were instead described as effective 30 days after publication. The Register is published on the 10th and 25th of each month. The AG's own formal-opinion review is the last step before filing. The path to a binding rule is therefore a Nov–Dec adoption, a filing by about mid-December, and publication on Dec 10 or Dec 25. https://www.bytebacklaw.com/2022/10/colorado-privacy-act-draft-rules-published/ and https://www.bytebacklaw.com/2024/12/new-colorado-privacy-act-rules-adopted/ - [2026-10-12] The CPA precedent also shows the AG aligns rule effectiveness to the statute's start date (Jul 1, 2023). Law-firm guides say the ADMT rules are "scheduled" to take effect with the statute on Jan 1, 2027. The target is therefore Jan 1. Even a slip of about 4 weeks past it still resolves Yes. https://hooglaw.com/ai-compliance/colorado-ag-admt-rulemaking-considerations.html and https://www.wiley.law/alert-Colorado-Proposes-Detailed-Rules-Implementing-New-ADMT-and-Chatbot-Laws - [2026-10-12] The hearing record is built to close fast. The comment deadlines are Sept 4 (revised draft), Oct 5 (revisions presented at the hearing) and Oct 26, 11:59 pm (final record). The interim draft was released Oct 6, three weeks before the hearing, which gives stakeholders a chance to respond before the hearing. Because the substantive revision has already happened before the hearing, a further comment round after it looks less likely. https://obsidianri.com/blog/newsroom-us-co-20260821-admt-chatbot-rulemaking-comment-deadline - [2026-09-xx] The AG already has a compressed, statute-driven schedule. A commentator describes the August release as the "first formal step" toward the deadline and says the rulemaking is on a compressed timeline. The same source says the Act takes effect Jan 1, 2027 "regardless of whether rulemaking is complete". That removes any incentive to wait, because the AG is the sole enforcer and has no reason to let the rules lag the statute. https://www.bytebacklaw.com/2026/08/colorado-attorney-general-releases-proposed-rules-for-the-new-admt-act/ - [2026-10-12] Rule 6 is core to the proposal and cannot be dropped without contradicting the statute. Proposed Rules 6.2 and 6.4 require an explanation of the factors behind an adverse outcome, and a 10-day acknowledgement and 45-day review. The statute itself requires the AG to adopt rules clarifying post-adverse-outcome disclosures, so the "at minimum clarifies disclosure" criterion is met by any adopted version of this rulemaking. https://fintechlaw.ai/blog/colorado-admt-rules-4-ccr-904-6-what-they-require - [2026-09-07] Litigation does not block the rules. The April 27 stay covers enforcement only. The xAI preliminary-injunction motion is due 28 days after final adoption. As of Sept 7, no new filing had appeared in the docket. A source says the AG will not enforce until rulemaking is complete. The rulemaking is therefore a precondition the parties themselves anticipated, and not something the stay prohibits. The resolution criteria also say pending judicial challenges do not prevent enactment. https://stackcyber.com/posts/ai-colorado-laws and https://www.ebglaw.com/insights/publications/workplace-ai-regulation-in-2026-how-employers-can-navigate-the-changing-legal-landscape - [2026-10-12] Political risk is low in the near term. A source already in the earlier reports says the legislature is out of session until Jan 11, 2027. A new bill cannot repeal or delay the Act and the rules before then. Any delay would have to come from the AG's own choice or from a court. I found no court action blocking rulemaking. https://coag.gov/ai/ BOTTOM LINE: The strongest path to Yes is that the AG adopts after the Oct 26 hearing in November or early December, files by mid-December, publishes Dec 10 or 25, and sets a Jan 1, 2027 effective date. That follows the 2023 and 2024 CPA timelines (about 5–8 weeks from hearing to adoption or filing), and it leaves a buffer of about 4 weeks past Jan 1 for the effective date to still land before Feb 1. The main prerequisite is no second revised draft and comment round after the hearing. NOT FOUND: any adopted ADMT rule or Secretary of State eDocket entry for 4 CCR 904-6 with an effective date; the AG's stated target adoption date; the text of the Oct 6 interim draft (not opened); any post-Sept 7 xAI docket activity; the SOS FAQ page (403).

YES means: a Colorado AG rule implementing the ADMT Act (SB 26-189) that at minimum clarifies the post-adverse-outcome disclosure requirements is adopted and legally binding (enacted) in Colorado before Feb 1, 2027. - [2026-10-12] **Effective-date arithmetic is tighter than "9 weeks to Jan 1" suggests.** The SOS rulemaking FAQ says an adopted rule has 20 days to obtain the AG-office opinion and file with the SOS. The Register publishes on the 10th and 25th. Filings from the 1st to the 15th publish on the 25th, and filings from the 16th to month-end publish on the 10th of the next month. A rule cannot take effect until it is published in the Register. The earliest effective date is 20 days after publication. Worked through: - Filing by Nov 30 gives publication on Dec 10 and effect on Dec 30. - Filing Dec 1–15 gives publication on Dec 25 and effect on about Jan 14. - Filing Dec 16–31 gives publication on Jan 10 and effect on about Jan 30. - Filing on or after Jan 1 gives publication on Jan 25 and effect on about Feb 14, which is after the deadline. - If "enacted" means legally effective, a slip of just a few weeks past the Oct 26 hearing can push it past Feb 1. Source: https://www.coloradosos.gov/pubs/CCR/agencyFAQs/rulemaking.html (publication calendar in the same FAQ and at https://coloradosos.gov/pubs/CCR/agencyFAQs/filing.html) - [2026-10-12] **The statutory clock gives the AG no pressure to hurry.** The agency has up to 180 days after the last hearing to adopt, which runs to about Apr 24, 2027. The agency has up to 180 days after the hearing to adopt the proposed rule. The Jan 1, 2027 deadline in SB 26-189 sits inside that window, and no source says missing it voids the rulemaking. Missing the 20-day post-adoption filing deadline may require restarting the process. That is a separate failure mode that could cost weeks. Source: https://www.coloradosos.gov/pubs/CCR/agencyFAQs/rulemaking.html - [2026-10-08] **The Oct 6 draft was a substantive rewrite, which raises the risk of another round.** A Ballard Spahr summary says the revised draft changed the "materially influence" standard and added a rebuttable presumption. It also changed adverse-outcome contents, reviewer standards and how consumer rights are structured. Heavy changes this close to the hearing invite objections and may lead the AG to publish yet another draft after Oct 26. The disclosure rule at the core of the question is among the provisions changed. Source: https://natlawreview.com/article/revised-draft-rules-colorado-admt-act-and-conversational-ai-act-released - [2026-10-12] **Slippage has already happened once.** The AG's own timeline had a revised draft by Sept 23, but the interim draft appeared Oct 6 (per coag.gov), about two weeks late. Sources: https://obsidianri.com/blog/newsroom-us-co-20260821-admt-chatbot-rulemaking-comment-deadline and https://coag.gov/ai/ - [2026-10-12] **The hearing may not produce adoption.** Written comment runs to 11:59 pm on Oct 26 (or the last day of the hearing if it runs longer). All comments submitted through Oct 26 will be considered for the final set of rules. So the AG must still digest comments, finalize text, adopt, and request the AG opinion. Troutman's Oct 2026 podcast describes "additional layers of process" still to come. Sources: https://www.consumerfinancialserviceslawmonitor.com/2026/08/colorado-proposes-rules-for-automated-decision-making-technology-and-chatbot-safety/ and https://www.troutman.com/insights/colorados-admt-act-proposed-regulations-unpacking-the-confusion-and-compliance-challenges-for-financial-services/ - [2026-10-12] **The AG has a stated reason to move deliberately.** The AG's office told the court it would neither promulgate implementing rules nor enforce the Act until the legislative session ended and any resulting rulemaking was complete. Final adoption starts xAI's 28-day clock for a preliminary-injunction motion. xAI must move within 28 days after final adoption of rulemaking implementing SB24-205 or any replacement. The AG, who agreed with xAI and the DOJ to the stay, has no litigation incentive to finish early. Sources: https://www.privacyworld.blog/2026/05/the-colorado-ai-act-hits-a-wall-litigation-legislative-uncertainty-and-an-enforcement-standstill/ and https://www.courtlistener.com/docket/73171074/x-ai-llc-v-weiser/ - [2026-10-12] **Enforcement is already frozen, so a late rule has no practical cost.** The April order bars initiation of enforcement until 14 days after the court rules on the preliminary-injunction motion. One analyst describes the Act as legally in force but functionally stayed. Missing Jan 1 therefore carries little consequence, which weakens the deadline as a forcing device. Source: https://modeldiplomat.com/story/ftcs-section-5-targets-colorado-ai-law - [2026-10-12] **Law-firm "will take effect Jan 1" language is aspirational, not a filed effective date.** Wiley says the rules, once finalized, will go into effect January 1, 2027. The filed rule must carry a specific effective date. A specific effective date is required when submitting the final rule filing. I found no filed effective date. Once the AG opinion and final filing are done, the date cannot be changed in the e-filing system. A date set too optimistically would need a later fix. Sources: https://www.wiley.law/alert-Colorado-Proposes-Detailed-Rules-Implementing-New-ADMT-and-Chatbot-Laws and https://coloradosos.gov/pubs/CCR/agencyFAQs/filing.html - [2026-10-12] **Resolution-criteria technicalities that favor NO.** - The rule must "at minimum clarify" post-adverse-outcome disclosures and be "enacted" with all legal requirements completed. - Adoption alone, a filing awaiting publication, or an AG opinion pending would arguably not be "binding". - If the AG splits the rulemaking, for example adopting the Chatbot Act rules first and deferring the contested ADMT provisions, the question could fail. - There is no mechanism for the legislature to step in: it is out of session until Jan 11, 2027 (per the colleague report). - These are my inferences from the criteria text. No source addresses how this market will resolve. - [2026-10-12] **Precedent shows lag between "final" and binding.** For the Privacy Act amendments, the AG announced final revisions on Oct 9, 2025, and then requested an AG opinion. The office had requested an AG opinion letter, and the rules would be filed with the SOS after it was received. Announced "final" text is therefore not binding law until the later steps are complete. Source: https://www.troutmanprivacy.com/2025/10/colorado-attorney-generals-office-finalizes-latest-colorado-privacy-act-rulemaking/ BOTTOM LINE: Under a strict "legally effective" reading, the AG must adopt and file by about Dec 31 at the latest (publication Jan 10, effect about Jan 30). That leaves little slack after an Oct 26 hearing that follows a substantial Oct 6 rewrite, with a 180-day adoption window and a stayed-enforcement posture that remove any penalty for lateness. The main NO path is slippage of a few weeks in a multi-step filing chain. NOT FOUND: Any adopted or final ADMT rule, AG-opinion request, or SOS filing. The AG's stated post-hearing adoption timetable. The text of the Oct 6 interim PDF (not opened). Any extension or postponement of the Oct 26 hearing. Any record of how long the AG took between hearing and effectiveness for the earlier Colorado Privacy Act rules (the 2025 amendments' announcement is dated, but I did not confirm the effective date). Any ruling in xAI v. Weiser after April.