Colorado's Draft AI Hiring Rules Go Beyond the Statute — and Most Resume Rankers Land Inside
Not legal advice. This article discusses legal and regulatory developments and is generated with AI assistance under human editorial review. It is provided for informational purposes only and does not constitute legal advice. Laws and regulations vary by jurisdiction and are subject to change. You should consult your own qualified legal counsel before taking or refraining from any action based on the content of this article. Read our AI Transparency statement.
The News
On August 11, 2026, the Colorado Attorney General's office filed proposed rules implementing the state's Automated Decision-Making Technology (ADMT) Act, which takes effect January 1, 2027. The draft rules go well beyond the statute's text, specifying what employers must tell rejected applicants within 30 days, who qualifies to conduct the human review that applicants can demand, and what records to retain for at least three years. Regulators also put forward two competing standards for when an AI tool 'materially influences' a consequential decision — the threshold that determines whether resume rankers, scoring tools, and interview assessments fall inside or outside the law. Public comments are open through October 26, 2026, with a rulemaking hearing the same day. Inside Privacy notes that at least 19 states have considered ADMT legislation this year, with California's CCPA Article 11, Colorado's ADMT Act, and Connecticut's CART Act all carrying January 1, 2027 compliance deadlines.
Why It Matters
For TA leaders, the draft rules translate an abstract statute into operational requirements with real deadlines. Under the broader of the two proposed 'materially influence' standards, any AI output that ranks, scores, classifies, or recommends — and is reviewed by or used to screen data for the decision-maker — is presumed to be covered. That description fits most ATS screening tools, resume ranking software, and structured interview scoring products. The rules also require deployers to explain, for any adverse outcome, the 'principal reasons' the AI produced that result. If your vendor cannot produce that explanation for an individual decision, the tool will not be usable for Colorado employment decisions once the rules take effect — and the same applies in California, whose CCPA Article 11 ADMT regulations carry the same January 1, 2027 deadline.
Taking Action
All action is situated in your corporate context. These are starting points, not prescriptions — choose what fits.
Connect
Who to talk with in your enterprise
Your HRIS lead and TA technology manager: ask which tools in your stack produce a rank, score, classification, or recommendation about candidates, and whether each vendor can supply the 'principal reasons' for an individual adverse outcome. Your employment counsel: flag the October 5 practical comment deadline if you want to weigh in on which 'materially influence' standard the AG adopts — the choice determines whether your common screening tools are covered or not.
Inspect
What to take a closer look at
Pull your vendor contracts for any AI tool that ranks, scores, or recommends candidates. For each, check whether the vendor can produce the principal reasons behind an individual adverse outcome. If they can't, that tool is non-compliant under Colorado's proposed rules from January 1, 2027 — and likely under California's CCPA Article 11 ADMT regulations, which carry the same deadline.
Reflect
What to think about more deeply
If your AI hiring tool can't explain why it rejected a candidate, is it really making the decision — or just hiding it?