---
title: "Complete the impact assessment for a deployed high-risk system"
url: "https://ailawframework.com/obligations/ai-decision-systems/finish-the-impact-assessment-for-an-in-scope-government-ai-use-case-befo/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A45-WR20261022-8-US"
practice_area: "AI decision systems (the firm's and clients')"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Complete the impact assessment for a deployed high-risk system

> From the file, list the purpose, the input and output categories, any known limitation, and any monitoring step already recorded, against the headings in section 6-1-1703(3)(b). Do not write the assessment.

Canonical page: https://ailawframework.com/obligations/ai-decision-systems/finish-the-impact-assessment-for-an-in-scope-government-ai-use-case-befo/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [AI decision systems (the firm's and clients')](https://ailawframework.com/obligations/ai-decision-systems.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the file, list the purpose, the input and output categories, any known limitation, and any monitoring step already recorded, against the headings in section 6-1-1703(3)(b). Do not write the assessment. |
| What the lawyer must review | Section 6-1-1703(3)(a) requires a deployer, or a third party the deployer contracts, that deploys a high-risk system on or after 1 February 2026 to complete an impact assessment, and on and after that date to complete one at least annually and within 90 days after an intentional and substantial modification is made available. Subsection (3)(b) lists the minimum contents, to the extent reasonably known or available. A comparable set of systems may share one assessment. An assessment completed for another law satisfies this duty if it is reasonably similar in scope and effect. The most recent assessment, the records of each assessment, and prior assessments are kept for at least three years after final deployment. The lawyer decides whether subsection (6) removes this duty and settles the assessment. |
| Written for | United States |
| Applies to | [Finish the impact assessment for an in-scope government AI use case before deployment](https://ailawframework.com/obligations/ai-decision-systems/finish-the-impact-assessment-for-an-in-scope-government-ai-use-case-befo.md) |

## Checking plan

- What the AI does: From the file, list the purpose, the input and output categories, any known limitation, and any monitoring step already recorded, against the headings in section 6-1-1703(3)(b). Do not write the assessment.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- The text opened is the signed act of 17 May 2024. It is a Colorado statute. Consumer means a Colorado resident. Confirm it is still the text in force. No other state's automated-decision statute was opened.
- Subsection (6) removes subsections (2), (3), and (5), not subsection (4), and only if every condition in subsection (6) is met, including fewer than fifty full-time equivalent employees, no training on the deployer's own data, and making the developer's assessment available to consumers.

## Sources

- [Colorado Senate Bill 24-205, signed act (17 May 2024)](https://leg.colorado.gov/bill_files/47770/download) (checked 2026-10-22)
- [Colorado General Assembly, SB24-205 bill page](https://leg.colorado.gov/bills/sb24-205) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*