(1) The attorney general may promulgate rules as necessary for the purpose of implementing and enforcing this part 17, including:
- (a) The documentation and requirements for developers pursuant to section 6-1-1702 (2);
- (b) The contents of and requirements for the notices and disclosures required by sections 6-1-1702 (5) and (7); 6-1-1703 (4), (5), (7), and (9); and 6-1-1704;
- (c) The content and requirements of the risk management policy and program required by section 6-1-1703 (2);
- (d) The content and requirements of the impact assessments required by section 6-1-1703 (3);
- (e) The requirements for the rebuttable presumptions set forth in sections 6-1-1702 and 6-1-1703; and
- (f) The requirements for the affirmative defense set forth in section 6-1-1706 (3), including the process by which the attorney general will recognize any other nationally or internationally recognized risk management framework for artificial intelligence systems.
Source: L. 2024: Entire part added, (SB 24-205), ch. 198, p. 1216, § 1, effective May 17.