Colorado AI Act (SB 24-205) Explained Quiz

Answers and explanations appear as you take the quiz.

1. Under SB 24-205, what makes an AI system high-risk?
   • It uses more than a set amount of computing power
   • It is sold to government agencies
   • It makes, or is a substantial factor in making, a consequential decision
   • It generates images or video
2. To what date did the August 2025 special session delay the law's effective date?
   • June 30, 2026
   • February 1, 2026
   • January 1, 2025
   • December 31, 2027
3. Who enforces the Colorado AI Act?
   • Any consumer through a private lawsuit
   • The Federal Trade Commission
   • The Colorado Attorney General exclusively
   • Each county court
4. Which is a deployer duty rather than a developer duty?
   • Providing documentation on training data to customers
   • Publishing a summary of high-risk systems the company develops
   • Reporting discovered discrimination risks to deployers who use its system
   • Completing impact assessments and notifying consumers about AI use in decisions
5. What must happen after an adverse consequential decision made with a high-risk system?
   • The consumer receives an automatic refund
   • The consumer receives the principal reasons, a chance to correct data and an appeal where feasible
   • The system must be shut down
   • The developer must publish the consumer's file
6. Following which framework can support an affirmative defense under the law?
   • The NIST AI Risk Management Framework
   • The Sarbanes-Oxley Act
   • The General Data Protection Regulation
   • The Americans with Disabilities Act
7. How does the Colorado law mainly differ from the EU AI Act?
   • It covers every AI system with equal obligations
   • It bans more AI practices than the EU law
   • It focuses on algorithmic discrimination in consequential decisions rather than banned practices and conformity assessments
   • It applies only to AI developed outside the US
8. Within how many days must a developer report discovered discrimination risks to the Attorney General and known deployers?
   • 10 days
   • 30 days
   • 365 days
   • 90 days