Colorado

Colorado's Open Records Act (CORA) provides public access to most records held by state and local government entities, with enumerated exemptions for personnel and investigative files.

Requires meetings of state and local public bodies to be open to the public, with notice and minutes requirements.

Hybrid centralized/decentralized model. Small purchase threshold $150,000; formal competition above $150,000 for goods/services, $500,000 for IT. Sustainability and social value requirements in procurement.

Colorado's AI Act creates obligations for developers and deployers of high-risk AI systems used in consequential decisions involving employment, housing, lending, healthcare, education, and similar activities. Companies may need to conduct impact assessments, implement risk-management measures, and provide disclosures relating to algorithmic decision-making.

Colorado's comprehensive privacy law modeled on the CCPA structure. Grants residents access, deletion, correction, portability, and opt-out rights, and requires data protection assessments for high-risk processing.