Is AI Dictating Your Paycheck and Prices? Colorado's New Bill Explained.

The Bottom Line

This bill stops companies from using artificial intelligence and your private data to secretly charge you higher prices or offer you lower wages. It still allows for general discounts and supply-and-demand surge pricing, but it makes it illegal for a business to use your personal digital footprint to squeeze more money out of you specifically.

What This Bill Actually Does

We are leaving a massive digital footprint everywhere we go—from the websites we browse and the locations our phones track, to our financial history and biometric data. Right now, sophisticated companies can feed that data into Automated Decision Systems (think AI and complex algorithms) to figure out exactly how desperate you are to buy something or how little money you might accept for a job. HB26-1210 tackles this head-on by banning two very specific practices: individualized price setting and individualized wage setting based on surveillance data.

The legislative declaration points to some alarming real-world possibilities. For instance, if a company's data shows you regularly buy supplies for diabetic insulin injections, their algorithm could secretly inflate the price you see for those products because they know you have to buy them. Or, if a gig-economy platform knows you recently took out a payday loan, it might offer you lower-paying gigs, assuming you are desperate enough to take whatever you can get. This bill officially categorizes these specific data-driven manipulations as deceptive trade practices under the Colorado Consumer Protection Act.

But here is what the bill doesn't do: It doesn't ban surge pricing or dynamic pricing. If Uber wants to charge everyone more because it's raining, or a concert ticket fluctuates based on general demand, that is still perfectly legal because it's based on market conditions, not your specific personal data. The bill also carves out clear exceptions for standard business practices. Companies can still offer different prices based on actual costs (like delivery distance), publicly available promotions (like joining a mailing list), social group discounts (like senior or veteran discounts), and loyalty programs (like your grocery store rewards card).

Finally, the bill introduces a transparency requirement. If a company uses automated systems to help set wages or prices, they must publish clear procedures that allow consumers and workers to request exactly what data is being used, understand how the algorithm is using it, and correct any inaccurate information in their profile.

What It Means for You

If you have ever felt like an airline, a retailer, or a gig-economy app was changing numbers just for you based on your browsing history, this bill is designed to put a stop to it. For the average Colorado consumer, this provides a powerful shield for your wallet. You won't be financially penalized for your health conditions, your internet searches, or your personal characteristics when buying goods and services. If the law goes into effect (currently slated for August 2026), you will have the legal right to ask companies what data their pricing algorithms have on you and demand corrections if it's wrong.

For workers—especially those in the rapidly expanding gig economy—this is a massive shift in how compensation is handled. More industries, from healthcare and construction to engineering, are adopting gig-style work platforms. These platforms often use algorithms to optimize labor costs, sometimes testing how low a specific worker is willing to go. Under this bill, an algorithm cannot use your private financial background or personal habits to lowball your wages.

If your employer does use AI or automated systems to set your pay based on legitimate metrics—like your individual performance, your adherence to safety protocols, or the cost of living in your specific city—they are required to tell you. Specifically, they must disclose in plain English, before they hire you, exactly what data the system looks at and how it calculates your compensation. Most importantly, if a company gets caught violating these rules, you don't have to wait for the state to step in. The bill includes a private right of action, meaning you can sue the company yourself or join a class-action lawsuit. You can recover actual damages or a mandatory minimum of $3,000 per violation, plus your attorney fees. If the company acted in bad faith, a judge can triple those damages.

What It Means for Your Business

If your business uses algorithmic pricing software, dynamic pricing models, or automated HR systems, you need to initiate a comprehensive audit of your technology. The line between legal dynamic pricing and illegal individualized pricing is the central focus of this bill. If your software adjusts prices based on global supply, demand, or delivery distance, you are in the clear. But if your vendor's software incorporates surveillance data—meaning it looks at an individual's web history, location data, or consumer profiling to maximize what that specific person will pay—you are exposed to immense legal liability.

Employers utilizing automated systems for compensation, bonuses, or task assignment have new, strict disclosure mandates. If an AI system dictates how much a worker is paid based on their performance metrics or sales generation, that is allowed. However, you must provide a plain-language disclosure to the worker before hiring them that explains exactly what data is being collected and how the AI calculates their pay. (Note: Public entities and state employers are excluded from the bill's definition of a "worker"). Furthermore, any business using automated decision systems for pricing or wages must build and publish a public-facing procedure. This procedure must allow consumers or workers to request their data, see how the algorithm used it, and challenge or correct any inaccuracies.

The financial penalties for non-compliance are steep and designed to sting. Because violations fall under the Colorado Consumer Protection Act, the Attorney General or local District Attorneys can fine your business up to $10,000 per violation. But the real risk lies in the private right of action. Aggrieved consumers or workers can sue you directly for a minimum of $3,000 per transaction or individual involved, plus attorney fees. If they can prove you intentionally violated the law, you could be on the hook for treble (triple) damages. It is critical to review contracts with your third-party software vendors to ensure their algorithms aren't secretly putting your company at risk of state-level deceptive trade practice lawsuits.

Follow the Money

According to the fiscal note, this bill is expected to have a minimal fiscal impact on the state budget, requiring absolutely zero new appropriations or taxpayer funding to enforce. The workload for the Department of Law (the Attorney General's Office) and local District Attorneys will increase slightly as they absorb these new deceptive trade practice investigations into their existing dockets, but they are expected to manage this within current resources.

Any new state revenue generated by this legislation would come directly from the bad actors breaking the law. Civil penalties—which can reach up to $10,000 per violation—would be credited to the state's General Fund. Additionally, the Judicial Department might see a slight bump in revenue from court filing fees if consumers and workers utilize their new right to file private civil lawsuits against companies. The state assumes that most businesses will proactively comply with the law, keeping the actual number of lengthy court battles and state-led investigations relatively low.

Where This Bill Stands

HB26-1210 is currently Sent to Governor. The latest official action came on 05/29/2026: Sent to the Governor.

That means both chambers have finished with the bill and it is now waiting for the governor to sign it or veto it.