USA – COLORADO Trends and Developments Contributed by: Mike Kilgarriff and Catherine Warren, Buchalter LLP
Colorado Fintech Trends 2026: A State Preview of the Next Phase of Regulation Over the past several years, Colorado has become one of the more consequential state jurisdictions for understanding where fintech regulation is headed. What makes Colorado notable is not simply the vol - ume of legislative or regulatory activity, it is the way Colorado’s recent developments illustrate three larger shifts occurring across the market: states are begin - ning to regulate the technology on which fintech prod - ucts depend, to test legal assumptions that have long supported national lending models, and to use general consumer protection and consumer credit authority to shape conduct in real time. Colorado now sits at the centre of each of those devel - opments. Its artificial intelligence law moves automat - ed decision-making in consequential contexts, includ - ing lending, toward a formal governance regime. Its 2023 opt-out legislation under the Depository Institu - tions Deregulation and Monetary Control Act of 1980, together with the Tenth Circuit’s 10 November 2025 decision in National Association of Industrial Bank- ers v Weiser , has introduced meaningful uncertainty into the bank–fintech partnership structures on which many digital lending programmes rely. Further, as federal priorities continue to shift, Colorado’s existing consumer-protection and consumer credit framework remains a reminder that state enforcement is often the mechanism through which new theories are first tested. Taken together, these developments show Colorado moving closer to the systems, structures, and super - visory tools that increasingly define how fintech is regulated in practice. That is what makes the state worth watching. Colorado is not simply producing more activity. It is surfacing some of the questions most likely to matter next. Artificial intelligence moves from product feature to governance Colorado’s artificial intelligence law reflects a broader regulatory shift away from viewing automated tools simply as product enhancements and toward treat - ing them as governance problems. Senate Bill 24-205 requires developers and deployers of “high-risk” arti - ficial intelligence systems to use reasonable care to
protect consumers from known or reasonably foresee - able risks of algorithmic discrimination. The law plac - es enforcement authority with the Colorado Attorney General, treats violations as deceptive trade practices, and is scheduled to take effect on 30 June 2026. The statute is broader than financial services, but its relevance to fintech is obvious. It applies to “high-risk” systems used to make, or used as a substantial factor in making, “consequential decisions”, and those deci - sions include financial or lending services alongside employment, housing, insurance, healthcare, educa - tion, legal services, and certain government services. In practical terms, that means automated underwrit - ing, fraud detection, pricing tools, risk scores, and other model-driven systems may fall within a frame- work that treats the method of decision-making, not merely the outward form of the product, as the object of regulation. The obligations imposed by the law reinforce that shift. Developers must provide deployers with docu - mentation concerning intended uses, foreseeable risks of algorithmic discrimination, and information needed to complete impact assessments. Deploy - ers must implement a risk-management policy and programme, complete impact assessments, review deployment annually, and disclose the use of high-risk systems. The statute also requires disclosure when a consumer is interacting with an artificial intelligence system if that fact would not otherwise be obvious. For financial services companies, the importance of Colorado’s law lies in what it changes about the reg - ulatory inquiry. A lender can no longer assume that scrutiny will begin and end with the terms of a product or the face of a disclosure. The statute asks how a decision was produced, what data it relied on, how the system is monitored, and what mechanisms exist to identify and correct problematic outputs. Artificial intelligence, in other words, is no longer treated simply as a tool for refining products, it is treated as part of the institution’s governance architecture. Colorado’s approach to artificial intelligence mat - ters for another reason: it shows Colorado is moving upstream. The same instinct appears elsewhere in Colorado’s fintech posture. The state has not con -
995 CHAMBERS.COM
Powered by FlippingBook