AI compliance for banks, lenders, and fintech

Your regulatory exposure

Companies in Financial Services using common AI tools could face up to 34 regulations across 19 states.

• Colorado ADMT / AI Act (SB 26-189)

  Colorado SB 26-189 repeals and reenacts SB 24-205 into an automated decision-making technology (ADMT) framework for consequential decisions. S...

  HighEnacted (pending)
• CCPA/CPRA Automated Decision-Making Technology Regulations

  California's ADMT regulations require businesses using automated decisionmaking technology for significant decisions (employment, finance, hou...

  HighEnacted (pending)
• Colorado Privacy Act (CPA profiling and ADM)

  Colorado profiling rules define three tiers: Solely Automated Processing, Human Reviewed Automated Processing, and Human Involved Automated Pr...

  HighIn effect
• Executive Order 14281: Restoring Equality of Opportunity and Meritocracy

  Directs federal agencies to deprioritize disparate-impact enforcement across civil rights statutes (Title VII, Title VI, ECOA, Fair Housing Ac...

  HighIn effect
• Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments

  Connecticut's omnibus bill dramatically expands the CTDPA. Lowers the applicability threshold from 100,000 to 35,000 consumers. Adds LLM train...

  HighUpcoming

Key obligations

• Impact assessments for consequential financial decisions
• Consumer notification before AI-driven credit decisions
• Bias audits for lending and underwriting models
• Right to human review of AI-driven denials
• Record-keeping of AI decision-making processes

Risk factors

Upcoming deadlines

• July 1, 2026 · Connecticut Public Act 25-113 (SB 1295) CTDPA and profiling amendments
• January 1, 2027 · Colorado ADMT / AI Act (SB 26-189)
• January 1, 2027 · CCPA/CPRA Automated Decision-Making Technology Regulations

Related state guides

• California
• Utah
• Colorado
• Texas