Advocates say Colorado's revised ADMT draft rules let deployers shift blame to developers and data brokers

EPIC, the Consumer Federation of America and Fairplay have commented on the Colorado Department of Law’s 6 October 2026 interim draft rules for the Automated Decision-Making Technology Act (SB 26-189) and the Chatbot Safety Act (HB 26-1263). EPIC also testified at a public hearing on 26 October.

According to the groups, the revised ADMT draft removes the duty to give a principal reason for adverse decisions. It gives deployers 15 days, instead of immediately, to answer requests for information. It also drops the rule that reviewers must not be subordinates of the original decision-maker, and adds seven ‘commercial reasonableness’ factors for limiting human review.

The groups say new ‘when known to the Deployer’ wording on data sources excuses gaps in provenance. Deployers without the data could also send consumers to a list of third parties. On chatbots, they back the draft’s data minimisation and call for a ‘strictly necessary’ limit on age-assurance data.

Editor’s note: This article relies solely on comments and a blog post published by the advocacy group EPIC and its co-signatories; the Colorado draft rules themselves were not reviewed.