Colorado's AI Act Faces Federal Preemption Threat Days Before Its June 30 Effective Date

By Hector Herrera | June 7, 2026 | Government

Colorado's AI Act — one of the first comprehensive AI consumer protection laws in the United States — is scheduled to take effect June 30, but faces simultaneous pressure from federal preemption and a concurrent state-level campaign to gut its enforcement provisions. Compliance teams that have spent months preparing for the deadline are now navigating legal uncertainty on two fronts.

The situation in Colorado has become the clearest illustration of what happens when federal AI policy attempts to override state law while states are still the only ones with actual enforcement mechanisms in place.

What the Colorado AI Act Requires

Colorado's AI Act applies to developers and deployers of high-risk AI systems — those used in consequential decisions about employment, housing, credit, education, and healthcare. The law's core standard is "reasonable care": companies must take reasonable care to protect consumers from algorithmic discrimination based on protected characteristics.

Specifically, the law requires:

• Risk assessments before deploying high-risk AI systems
• Bias impact statements documenting how systems were tested for discriminatory outcomes
• Consumer notice when AI is used in a consequential decision
• Appeal rights allowing consumers to contest AI-driven decisions

The law applies to any company that does business in Colorado, regardless of where it is headquartered. That reach makes it functionally national in scope for companies with U.S. operations.

The Federal Preemption Threat

The Trump administration's June 2 executive order directs the Department of Justice to identify state AI laws deemed inconsistent with national AI policy and to pursue legal challenges against them. The executive order frames state AI regulation as a potential barrier to U.S. competitiveness — an argument that positions even consumer protection laws as obstacles to AI development.

According to White & Case, Colorado's AI Act is among the laws explicitly under scrutiny. DOJ has not yet filed a preemption challenge, but the executive order creates the legal posture for one. The constitutional question — whether Congress has acted in a way that preempts state AI regulation, or whether the executive order itself can preempt state law — is unsettled. Most legal scholars believe a direct DOJ challenge would take months to resolve through the courts.

That timeline is important: the June 30 effective date arrives before any legal challenge would be resolved. Companies must decide whether to treat the law as in force while litigation is pending.

The State-Level Amendment Campaign

Separately, Colorado's own legislature has been debating amendments to the AI Act that would delay enforcement, narrow its scope, or shift the burden of proof from companies to consumers who allege harm. The amendment campaign — backed by a coalition of technology companies and business associations — has been framed as a "technical corrections" process, but critics argue it would functionally defang the law before it takes effect.

As of early June, the amendment process has not concluded. The result is a Colorado AI Act that may take effect June 30 in a form different from the one compliance teams have been preparing for — with the final text still in motion as the deadline arrives.

What Compliance Teams Should Do

The honest answer for compliance teams is that certainty isn't available. But the risk calculus is manageable:

Prepare for the law as written. The most legally conservative posture is to treat the Colorado AI Act as enforceable on July 1. If DOJ challenges the law and wins, compliance investments don't create liability. If DOJ doesn't challenge (or loses), companies that prepared are protected.

Document the uncertainty. Legal memos recording the ambiguity, the decisions made, and the rationale for those decisions create a record that matters in enforcement actions. "We were preparing to comply in good faith while the legal landscape was unsettled" is a defensible position. "We ignored the law because we heard it might be challenged" is not.

Watch the amendment process. If Colorado's legislature passes amendments before June 30, the effective law may differ from the version currently in compliance frameworks. Track the final text.

What to Watch

The Colorado situation is a preview of what happens when federal AI policy and state consumer protection law collide at a hard deadline. If DOJ files a preemption challenge, it will be the first direct federal legal action against a state AI consumer protection law — a case with implications far beyond Colorado.

The broader stakes: 30+ states have AI legislation in various stages of development. If federal preemption succeeds against Colorado, it signals to every other state that AI consumer protection legislation is contestable at the federal level regardless of its merits. That chilling effect on state AI governance is, arguably, the executive order's intended outcome.

Sources: White & Case