How to Comply with Adverse-Outcome Disclosure, Correction and Human Review — Colorado AI Act

Summary, not legal advice. Within 30 days after an adverse outcome, the deployer explains the decision and the ADMT's role, offers a way to request more information, lets the consumer correct inaccurate personal data and, to the extent commercially reasonable, requests human review (C.R.S. 6-1-1704(3)-(6)).

Implementation steps

1. Define what counts as an adverse outcome in your process.
2. Build the 30-day disclosure and the information-request path.
3. Set up correction and human-review handling and keep decision records for 3 years.

Evidence needed

• Disclosure template
• Request and review logs
• Records retention policy

Passing criteria

• Disclosures sent within 30 days
• Requests handled and logged