Compliance Roadmap · Colorado AI Act × Employment Services
Employment AI governance built on the NIST AI RMF (and ISO/IEC 42001 where a certifiable management system is preferred) holds together a complex multi-state employment AI landscape that includes NYC Local Law 144 (AEDT bias audits), Illinois HB 3773 (employer AI disclosure), EEOC algorithmic discrimination guidance, ADA AI accommodations expectations, and state human rights commission AI activity. Colorado's amended AI law, SB 26-189 — signed May 14, 2026 and effective January 1, 2027 — repealed and replaced the original SB 24-205, and now imposes a transparency/disclosure regime on automated decision systems used in employment rather than the high-risk classification, impact-assessment, and deployer-duty framework the original act proposed. The repealed SB 24-205 would have imposed shared deployer-developer documentation duties on employers and HR tech vendors; SB 26-189 narrows the Colorado-specific obligation to disclosure for automated decision systems.
EFROS's experience with employment AI governance programs is that multi-state coordination is decisive. An employer with workers in Colorado, New York, Illinois, and California faces overlapping but non-identical AI disclosure and bias-testing requirements that cannot be satisfied with one document. NIST AI RMF is the framework that holds together across all of them: NYC Local Law 144 requires bias audits that map to NIST AI RMF Measure function work, and Illinois HB 3773 requires employer notice that maps to NIST AI RMF Manage function work. EEOC enforcement on algorithmic employment discrimination has been active and the technical assistance documents (2023, 2024) align closely with NIST AI RMF risk-management expectations and are the operative federal exposure. Under SB 26-189, the Colorado-specific obligation is transparency/disclosure for automated decision systems — not the impact-assessment program or the 90-day discovery clock the repealed SB 24-205 would have imposed.
NIST AI RMF is the framework that holds an employer's multi-state AI obligations together. Colorado's amended AI law (SB 26-189, effective 2027) repealed and replaced SB 24-205, swapping the proposed high-risk / impact-assessment / deployer-duty regime for a transparency/disclosure regime for automated decision systems used in employment. NYC LL144, Illinois HB 3773, EEOC, and state human rights commission expectations remain the operative substantive obligations. Multi-state employers need one coordinated AI governance program rather than parallel state programs.
Of the controls and obligations in Colorado AI Act, these are the ones that most consistently show up as audit findings or operational gaps in employment-services environments. Order reflects sequence of typical implementation, not abstract importance — most items depend on the earlier ones.
Includes vendor AI (Workday, SAP SuccessFactors, HiredScore, Eightfold, etc.) and embedded AI in ATS / HRIS platforms.
The framework that holds multi-state employment AI obligations together. Coordinates with NYC LL144 bias audits and Illinois HB 3773 employer notice work.
NIST AI RMF Measure work. For employment AI, coordinate with EEOC bias testing and ADA accommodation analysis — the operative federal exposure.
NYC LL144 candidate notice and Illinois HB 3773 employee notice are the operative state notice obligations. Coordinate the SB 26-189 automated-decision-system disclosure with them — build the UX once.
NYC LL144 bias audits and SB 26-189 disclosure both depend on developer-side information. Most HR tech vendor contracts do not currently provide enough.
Patterns EFROS sees consistently across employment-services Colorado AI Act engagements. None of these are unfixable; all of them are common enough to be worth naming.
Typical EFROS engagement cadence for a employment-services organization starting from a credible baseline. Earlier maturity shifts the timeline left; less mature starting positions shift it right.
Complete AEDT inventory across all Colorado worker-affecting AI. Adopt NIST AI RMF (or ISO/IEC 42001) as the multi-state operating anchor. Map to NYC LL144, Illinois HB 3773, and EEOC expectations.
Complete risk documentation and bias testing per AEDT. Build worker notice UX coordinating NYC LL144, Illinois HB 3773, and the SB 26-189 disclosure. Renegotiate HR tech vendor contracts to support audits and disclosure.
Stand up continuous monitoring and the NYC LL144 annual bias-audit cadence. Coordinate with EEOC and state human rights commission complaint workflows.
EFROS operates employment AI governance for employers and HR tech vendors as a coordinated multi-state program — NIST AI RMF as the operating anchor, NYC LL144 bias audit coordination, Illinois HB 3773 employer notice integration, and the SB 26-189 automated-decision-system disclosure. We frame Colorado around the amended SB 26-189 transparency regime — not the repealed SB 24-205 deployer-duty regime — and renegotiate HR tech vendor contracts to deliver the developer-side information those obligations require.
Disclaimer: this roadmap is a compliance research artifact, not legal advice. Implementation decisions for employment-services organizations require analysis of specific facts and should be made in consultation with qualified legal counsel and an assessor appropriate to Colorado AI Act.
Reference this resource with attribution under CC-BY-4.0. Copy any of the formats below for academic papers, blog posts, AI citations, or vendor evidence packages.
Efros, S. (2026, May). Colorado AI Act for Employment Services: Compliance Roadmap (2026). EFROS. https://efros.com/compliance/colorado-ai-act-for-employment-services/
Efros, Stefan. "Colorado AI Act for Employment Services: Compliance Roadmap (2026)." EFROS, May 2026, https://efros.com/compliance/colorado-ai-act-for-employment-services/.
Efros, Stefan. 2026. "Colorado AI Act for Employment Services: Compliance Roadmap (2026)." EFROS. https://efros.com/compliance/colorado-ai-act-for-employment-services/.
S. Efros, "Colorado AI Act for Employment Services: Compliance Roadmap (2026)," EFROS, May 2026. [Online]. Available: https://efros.com/compliance/colorado-ai-act-for-employment-services/
@misc{efros2026coloradoaiactfor,
author = {Stefan Efros},
title = {Colorado AI Act for Employment Services: Compliance Roadmap (2026)},
year = {2026},
month = {May},
publisher = {EFROS},
url = {https://efros.com/compliance/colorado-ai-act-for-employment-services/},
note = {Accessed: May 2026}
}https://efros.com/compliance/colorado-ai-act-for-employment-services/
Site-wide citation metadata is also published as a CITATION.cff file at /CITATION.cff for citation-management tools and academic indexers.
End-to-end compliance program design and operation across multiple frameworks.
OpenVertical program for employment-services organizations — security operations, compliance, and AI governance.
OpenNIST AI RMF, Colorado SB 26-189, and state AI law overlays as an operating program.
OpenCitation-ready research on US state-level AI laws and compliance obligations.
Open60-second posture scan plus senior engineer follow-up.
Open