Colorado Is Making Employee Background Checks Continuous. Here Is What Changes.
Sponsors: Meghan Lukens, Anthony Hartsook, Dafna Michaelson Jenet, Janice Rich·Judiciary·

Illustration: Assembly Required
The Bottom Line
If you need a background check for your job, business, or professional license, it will soon become a continuous monitor rather than a one-time snapshot. This bill links Colorado with a federal database to automatically alert employers and regulators the moment an employee gets into legal trouble, closing a massive loophole in how we vet people in positions of trust.
What This Bill Actually Does
To understand why this bill matters, you have to understand how background checks currently work. Right now, when someone gets a fingerprint-based background check for a civilian job—like teaching, nursing, real estate, or daycare—it is essentially just a snapshot in time. The Colorado Bureau of Investigation (CBI) and the FBI check your past, confirm your record is clean, and clear you for employment. But if you commit a felony two weeks, two months, or two years after you are hired, the school district or hospital that employs you has absolutely no idea unless you voluntarily confess or they pay to re-run your prints. This creates a dangerous blind spot for vulnerable populations.
Enter HB26-1108. This legislation permanently changes the game by authorizing the state to plug directly into the FBI’s Rap Back service. According to Section 1 (7.5)(a) of the bill, when someone submits civil fingerprints for a background check, the FBI will now retain those prints in a continuous-monitoring national database. If that individual is subsequently arrested or flagged for criminal activity anywhere in the country, the Rap Back service immediately pings the CBI. The state then automatically pushes a notification of that "activity" to the authorized employer or state licensing agency.
Beyond just automatic notifications, the bill includes a provision that significantly expands law enforcement capabilities. It explicitly permits latent searches. This means that if police lift unidentified fingerprints from a future crime scene, they can run them against this massive database of civilian applicant prints, not just the traditional database of previously convicted criminals. Overall, it is a sweeping upgrade to state security and compliance tracking, shifting the burden of discovery entirely away from employers and onto an automated federal safety net.
What It Means for You
If you are a working professional in Colorado who holds a state license or works in a regulated field, your relationship with background checks is about to fundamentally change. Historically, once you cleared your initial background check to become a financial advisor, a youth sports coach, or a pharmacy technician, you were largely in the clear unless your employer specifically mandated annual re-checks. Under this legislation, starting July 1, 2027, any new fingerprints you submit will enter you into a system of constant surveillance. Your past record is no longer the only thing being evaluated; your future conduct is now tied directly to an automatic alert system. If you get a DUI on a weekend trip to another state, your licensing board or employer will likely be notified before you even return to work.
On the flip side, if you are a parent or a consumer, this bill offers a massive upgrade in peace of mind. You entrust your children to daycare workers, your aging parents to in-home care aides, and your life savings to accountants. Right now, you are relying on the hope that these individuals haven't committed any dangerous offenses since the day they were hired. HB26-1108 effectively guarantees that people in positions of public trust are continuously vetted, making it nearly impossible for bad actors to hide recent criminal activity from the organizations that employ them.
Action Items for Residents:
- Check your professional licensing requirements: If your license is up for renewal on or after the July 1, 2027 effective date, be prepared to submit new prints to enter the Rap Back system.
- Talk to your union or professional association: Ask them how they are preparing to handle potential "false positive" alerts or notifications for minor infractions that don't actually impact your ability to perform your job safely.
- Weigh in on the privacy implications: If you have concerns about your civil prints being retained indefinitely for latent crime scene searches, contact the members of the House Judiciary Committee where this bill is currently being debated.
What It Means for Your Business
For Colorado business owners, HR directors, and corporate compliance officers, HB26-1108 is the most consequential shift in hiring practices we have seen in years. If your business relies on employees who require fingerprint-based background checks—such as child care facilities, specialized transportation companies, healthcare clinics, or private security firms—you are about to receive a firehose of new data. You will no longer have to pay for recurring annual background checks to ensure your workforce remains clean. The FBI and CBI will do the monitoring for you, pushing notifications to your desk the moment an employee has a run-in with the law.
However, with this new stream of data comes a massive new administrative and legal liability. The Rap Back service notifies authorized agencies of "activity." This frequently means arrests, not just convictions. You are going to face incredibly difficult HR decisions. If your employee is arrested over the weekend but hasn't been to court yet, they are legally innocent. Do you suspend them with pay? Do you terminate them? If you do nothing and they subsequently harm a client, your liability could be astronomical because the state has a digital paper trail proving you were notified of their arrest. Your employee handbook and your employment contracts need to be rewritten to explicitly outline how continuous background notifications will be handled.
Action Items for Business Owners This Week:
- Call your employment attorney: Start drafting language for your employee handbook detailing how your company will respond to Rap Back notifications, specifically addressing how you will handle arrests versus actual convictions.
- Review your current background check roster: Audit exactly which roles in your company require state-mandated civil fingerprinting so you know exactly how much of your workforce will be subject to this continuous monitoring.
- Update your privacy protocols: Ensure your HR department has strict, documented protocols for handling highly sensitive criminal justice data. Improper handling or leaking of FBI alerts can lead to severe federal penalties and loss of access to the background check system.
Follow the Money
According to the initial fiscal note drafted by nonpartisan legislative staff on February 13, 2026, this bill is surprisingly cheap for the state to implement. In fact, analysts project zero additional state revenue and zero additional state expenditures for the upcoming fiscal years. How is this possible for such a massive data overhaul? The fiscal note assumes that the actual volume of fingerprint-based background checks won't change—employers who require them today will keep requiring them tomorrow, and the standard processing fees paid to the Colorado Department of Public Safety (CDPS) will remain steady.
The underlying technology for the Rap Back service is already built, funded, and maintained by the federal government. The CBI simply needs to connect Colorado's existing infrastructure to it. The fiscal note does acknowledge that if the CBI eventually needs to tweak its internal software or administrative processes to handle the incoming alerts and maintain compliance with FBI data standards, those costs will be handled quietly through the routine annual budget process rather than requiring a massive special appropriation in this bill. For local governments, school districts, and municipal employers, there are no immediate new state fees, but they will absolutely need to absorb the localized HR workload of processing and investigating these automatic employee alerts.
Where This Bill Stands
HB26-1108 was officially introduced in the House on February 3, 2026, and has been assigned to the House Judiciary Committee. The bill boasts strong bipartisan backing, co-sponsored by Representatives Meghan Lukens (D) and Anthony Hartsook (R) in the House, alongside Senators Dafna Michaelson Jenet (D) and Janice Rich (R) in the Senate. This cross-aisle support for a public safety and administrative efficiency measure suggests the bill has a very smooth trajectory ahead.
Because it does not require controversial new funding and solves a widely recognized blind spot in employee vetting, expect it to move quickly through its committee hearings. If passed, the law features a delayed effective date of July 1, 2027 (barring any citizen referendum petitions). This gives both the CBI and Colorado employers over a year to update their digital systems, compliance protocols, and HR policies before the first continuous-monitoring fingerprints are officially submitted. Keep an eye on the House Judiciary calendar over the next few weeks for the first round of public testimony, which will likely feature privacy advocates on one side and child-safety organizations on the other.
The Opportunity Signal
Where this bill creates practical upside for operators: the opening, the key constraints, and the move to make while the window is still favorable.
Continuous Background Check Compliance Consulting
This bill creates a critical compliance gap and liability risk for Colorado businesses employing individuals in regulated fields. Starting July 1, 2027, employers will receive automated notifications of employee arrests, not just convictions. This necessitates immediate review and revision of employee handbooks, HR policies, and employment contracts to define clear protocols for responding to such alerts, including handling potential suspensions, investigations, and terminations. Consulting firms specializing in employment law and HR compliance have a significant opportunity to guide businesses through these complex legal and operational changes, mitigating substantial legal and reputational risks.
- New automated notifications will cover arrests, requiring clear company policy on how to differentiate and respond to arrests versus convictions.
- Effective July 1, 2027, all new fingerprint-based background checks will initiate continuous monitoring for the employee.
- Improper handling of alerts or failure to act on notified criminal activity can lead to astronomical liability for the employer.
- Strict protocols are needed for handling sensitive criminal justice data to avoid federal penalties and maintain access to the system.
Next move: Contact Colorado employment law attorneys or HR compliance consultants to begin drafting updated employee handbook language and internal protocols for managing Rap Back notifications before the bill's effective date.
HR Workflow and Data Management Solutions
With the implementation of the FBI's Rap Back service, Colorado businesses will receive a consistent stream of sensitive criminal justice alerts for their continuously monitored workforce. This influx of data, coupled with the need for immediate and compliant responses, creates a demand for specialized HR technology and service solutions. Companies can develop or adapt existing platforms to integrate with CBI notifications, automate initial alert processing, and provide structured workflows for HR departments to investigate, document, and manage employee incidents. Such solutions can help businesses efficiently navigate the new regulatory landscape, reduce administrative burden, and ensure adherence to data privacy and legal requirements.
- The state will push notifications of 'activity' (e.g., arrests) to authorized employers, shifting data discovery burden.
- HR departments will face an increased workload of processing, investigating, and documenting these automated alerts.
- Solutions must ensure strict data privacy and security protocols to comply with FBI standards and avoid penalties.
- Opportunity exists to provide value-added services around the core Rap Back notification, such as incident tracking and reporting.
Next move: Conduct market research with Colorado businesses in regulated sectors (e.g., childcare, healthcare, private security) to identify specific pain points in managing continuous background check alerts and begin prototyping a workflow management tool or service offering.
Get the Wednesday briefing
Colorado legislature coverage, in plain language. Free.
Frequently Asked Questions
What does HB26-1108 do?
What is the current status of HB26-1108?
Who sponsors HB26-1108?
How does HB26-1108 affect Colorado businesses?
What committee is reviewing HB26-1108?
When was HB26-1108 last updated?
Related Bills
Paying a Contractor Upfront? How Colorado Plans to Protect Your Deposit
In Committee
HB26-1009A Mandate for Police: Changing How Colorado Handles Domestic Violence Calls
In Committee
HB26-1020Colorado Could Ban Arrests Based Solely on Roadside Drug Tests
Passed Senate
HB26-1216Fixing the Fine Print: The Bill Cleaning Up Colorado's Tax and Transit Laws
In Committee