Colorado community banks and credit unions operate in one of the most heavily regulated industries in the country. They are accustomed to compliance complexity. But the Colorado AI Act has added a new layer that most community lenders have not yet mapped — one that intersects with existing federal obligations under the Equal Credit Opportunity Act and the Fair Housing Act in ways that matter for how you build your compliance program.
Where AI Shows Up in Colorado Lending
Most Colorado community lenders are using AI in their lending processes whether they recognize it or not. FICO's newer scoring models incorporate machine learning. VantageScore uses AI. Virtually every major underwriting platform released or updated in the past three years includes AI components that influence credit decisions.
Loan origination systems like Encompass and Calyx have added AI features for document analysis, risk assessment, and compliance checking. AI-assisted fraud detection systems that score applications and flag potential issues are deployed throughout the mortgage and consumer lending process. Even the income and employment verification systems most Colorado lenders use — particularly Equifax's The Work Number — use AI in data processing and presentation.
The Colorado AI Act's Specific Requirements for Lenders
The Colorado AI Act requires that Colorado lenders using AI in credit decisions implement a risk management policy covering their AI systems, conduct impact assessments for each AI system used in lending decisions, provide consumer disclosures when AI is used, and offer applicants a meaningful appeal process when AI influences an adverse credit decision.
The impact assessment requirement is particularly significant for lenders. For each AI-assisted component of your lending process — credit scoring, underwriting, fraud detection, income verification — you need a documented assessment of the system's purpose, data inputs, known limitations, discrimination risks, and your mitigation measures. Update these assessments annually.
The ECOA Intersection
The federal Equal Credit Opportunity Act has required adverse action notices for decades. When you deny credit, you must notify the applicant of the reason and the information that influenced the decision. The Colorado AI Act adds a parallel disclosure requirement: when AI is used in a consequential credit decision, the affected person must be told that AI was involved.
Colorado lenders can satisfy both requirements simultaneously. Your existing ECOA adverse action notice process can be updated to include Colorado AI Act disclosure language. The documentation requirements also overlap — FCRA compliance programs already include vendor management and audit trails. Extend that program to cover your Colorado AI Act obligations and you are not doing twice the work.
What Colorado Community Lenders Must Do Before June 30th
Identify every AI-assisted platform in your lending process. Send formal Colorado AI Act documentation requests to each vendor. Complete impact assessments for each system. Update your adverse action notices to include Colorado AI Act disclosure language. Build an appeal process for applicants who want human review of AI-influenced credit decisions. Document everything in a compliance file.
This article is for informational purposes and does not constitute legal advice. For legal advice specific to your situation, consult a licensed Colorado attorney.