Colorado

Colorado's Open Records Act (CORA) provides public access to most records held by state and local government entities, with enumerated exemptions for personnel and investigative files.

Requires meetings of state and local public bodies to be open to the public, with notice and minutes requirements.

Hybrid centralized/decentralized model. Small purchase threshold $150,000; formal competition above $150,000 for goods/services, $500,000 for IT. Sustainability and social value requirements in procurement.

Colorado's original AI Act (SB 24-205) was repealed and replaced with a new framework effective January 1, 2027. The replacement narrows the scope and adjusts obligations for developers and deployers of high-risk AI systems used in consequential decisions involving employment, housing, lending, healthcare, and education.

Applies to businesses processing data of 100,000+ Colorado residents, or 25,000+ if deriving revenue from data sales. Grants access, deletion, correction, portability, and opt-out rights. Requires data protection assessments for high-risk processing.