The act allows the joint technology committee (JTC), within 90 days after the day that the chief information security officer of the office of information technology (security officer) files a written information technology security compliance report (compliance report) with the JTC as required by the act, to vote to request that the legislative audit committee direct the state auditor to conduct a special information technology security audit (IT security audit) of the office of information technology (OIT) if the compliance report indicates that one or more audit recommendations made by the state auditor is unresolved 2 or more years past the implementation date for the audit recommendation or if a material discrepancy exists between a representation in the compliance report and a previous audit finding. If the JTC votes to request an IT security audit and if the legislative audit committee votes to direct the audit, the act requires:The state auditor to conduct the IT security audit;The state auditor to obtain input from OIT when the state auditor determines the scope and boundaries of the audit;The state auditor to submit the IT security audit report to the legislative audit committee, the JTC, the joint budget committee, and the governor; andOIT to reimburse the state auditor for the auditor's costs incurred in completing the IT security audit. The act requires OIT to establish, maintain, keep, update, and make available to state agency information technology leadership and the members of the JTC a list of all active information technology vendor contracts for state agencies. The act specifies that, except in the case of an information technology security emergency, OIT shall not publish or implement a technical information technology standard, and that the standard is void, unless the standard:Was publicly posted; andReceived approval from the security officer if the standard relates to security, access controls, or the handling of data. The act requires OIT to ensure that, if an information technology contract provides ongoing service and delivery to Coloradans, the contract maintains current architecture diagrams that are updated at least annually. The act prohibits the chief information officer from delegating a duty, responsibility, or power of the security officer. The act requires the security officer to submit 2 annual reports to the JTC. The first report is a written compliance report that includes OIT's current compliance status with applicable security standards; all open audit recommendations regarding OIT made by the state auditor and the date on which each recommendation was made; and a timeline for remediation and a mitigation plan or compensation controls for each open audit recommendation made by the state auditor. The second report is a written statewide information technology security risk report (security risk report) that assesses the overall security risk posture of state agency information technology systems. To support the preparation of the security risk report, the security officer may conduct evaluations of state agency information technology systems, including penetration testing, vulnerability scanning, configuration evaluations, and vendor and system reviews. Each state agency shall provide to the security officer, upon request, the access and information necessary to conduct evaluations of state agency technology systems, including system access, product information, and architecture information. The act requires the security officer, or the chief information officer if the security officer is unavailable, to perform the duties and uphold the responsibilities assigned to the security officer pursuant to law.(Note: This summary applies to this bill as enacted.)
No later than July 1, 2026, the department of health care policy and financing (HCPF) shall convene a steering committee (steering committee) to support the transition of services provided in qualified residential treatment programs (QRTP) and psychiatric residential treatment facilities (PRTF) to the managed care system for members in the care and custody of a county department of human or social services (county department). No later than April 1, 2027, HCPF, in collaboration with the steering committee, shall develop policies and recommendations to support the transition of QRTP and PRTF to the managed care system for members in the care and custody of a county department. No later than July 1, 2027, HCPF shall implement or initiate the transition of services provided in QRTP and PRTF to the managed care system for members in the care and custody of a county department according to the policies and recommendations developed by HCPF in collaboration with the steering committee. HCPF shall submit quarterly reports to the joint budget committee with information about the steering committee's monthly meetings.(Note: This summary applies to this bill as enacted.)
The act makes various updates to language in the 'Workers' Compensation Act of Colorado' to align with technology changes in the division of workers' compensation in the department of labor and employment. These updates include changing current statutory language requiring mailing of documents to allow for electronic mailing or filing of the documents. The act also changes the fund into which an employer or employer's insurance carrier makes payments to the state for a compensable injury resulting in death of a minor without surviving parents from the subsequent injury fund to the Colorado uninsured employer fund.(Note: This summary applies to this bill as enacted.)
Existing law authorizes the general assembly to set compensation levels for employees of the state. Accordingly, the act clarifies that, for the purposes of laws concerning local minimum wages, the term 'employer' means a corporation, a proprietorship, a partnership, a joint venture, a limited liability company, a trust, an association, a political subdivision of the state, an individual, or any other entity that employs an employee. However, 'employer' does not include the state of Colorado to the extent that a state employer has a collective bargaining agreement as to employee wages. Current law states that the governing bodies of municipalities have the power to license, regulate, and tax any lawful occupation, business place, amusement, or place of amusements (occupation or business place) and to fix the amount, terms, and manner of issuing and revoking licenses issued to an occupation or business place. The act clarifies that the state of Colorado is not an occupation or business place subject to such tax. The act requires the office of state planning and budgeting to submit to the joint budget committee, on or before January 4, 2027, a supplemental budget request concerning compensation of state employees during the 2026-27 state fiscal year.(Note: This summary applies to this bill as enacted.)
The act relocates in statute the disability support fund (fund), which finances the work of the Colorado disability opportunity office (office). The fund receives revenue from fees paid for license plates in a retired style and from the sale of unique vehicle registration numbers. The act makes the office responsible for administering the sale of these unique vehicle registration numbers, which was previously a duty of the Colorado disability funding committee (committee) housed within the office. The act repeals the committee on July 1, 2027. The fund is subject to annual appropriation to support the office and, for state fiscal year 2026-27 only, the fund is also subject to annual appropriation by the general assembly to the department of labor and employment (department) for vocational rehabilitation. Beginning on October 1, 2026, the $25 annual fee paid for license plates in a retired style is replaced by a one-time and annual fee of $2.50 credited to the fund and a one-time and annual donation of $22.50 remitted to the Colorado disability funding authority (authority), which is a newly created special purpose authority. The authority is governed by a board of 13 members appointed by the governor, the majority of whom are individuals with disabilities, individuals with immediate family members with disabilities, or individuals who are caregivers to a family member with a disability. In making the appointments, the governor must ensure that the authority board has members with experience in or knowledge of:Business and business management;Nonprofit entities and managing nonprofit entities;Advocacy for individuals with disabilities;The practice of medicine, with experience working with individuals with disabilities; andThe practice of law, with experience working with individuals with disabilities. The authority is required to invite nonprofit entities, independent living centers, county departments of human services, county departments of social services, and other state and county agencies to submit proposals for programs to aid individuals with disabilities in accessing disability benefits. Beginning on July 1, 2027, the authority is required to award a contract or grant to one or more of the entities that submitted program proposals. When adequate funding is available, the authority may also:Accept and review proposals to fund projects or programs that study or pilot new and innovative ideas that will lead to an improved quality of life or increased independence for individuals with disabilities; andMake grants or develop, implement, or deliver education programs concerning reserved parking that is available to an individual with a disability affecting mobility. On or before December 1, 2027, and on or before each December 1 thereafter, the authority is required to prepare and submit a financial and performance report to the joint budget committee. In addition to this annual report, the state auditor may also be required to conduct or cause to be conducted postaudits of the authority. By October 1, 2026, the state treasurer is required to issue a warrant in the amount of $523,343 from the fund to the authority. On June 30, 2026, the state treasurer is required to transfer $21 million from the fund to the general fund. For the 2026-27 state fiscal year, the act decreases by $100,000 the appropriation from the disabled parking education and enforcement fund to the department for use by the office for operating expenses. For the 2026-27 state fiscal year, $1 million is appropriated from the fund to the department for use by the division of vocational rehabilitation and independent living services. For the 2026-27 state fiscal year, $27,000 is appropriated from the fund to the department of revenue for use by the division of motor vehicles for DRIVES maintenance and support.(Note: This summary applies to this bill as enacted.)
Current law requires the general assembly to appropriate $650,000 from the general fund to the department of local affairs (department) on July 1, 2026, and $1 million from the general fund to the department on July 1, 2027, to reduce participating employer contributions to a multiple employer health trust for volunteer firefighters and part-time firefighters. The act repeals the appropriation otherwise required on July 1, 2026. Current law requires the general assembly to appropriate money from the general fund to the division of criminal justice in the department of public safety for the purpose of reimbursing a multiple employer health trust for the direct costs of providing cardiac and other health screenings for peace officers as follows:$350,000 for the state fiscal year beginning July 1, 2026; $500,000 for the state fiscal year beginning July 1, 2027; $1 million for the state fiscal year beginning July 1, 2028; andOn each July 1 thereafter, sufficient funds.The act repeals the appropriation otherwise required on July 1, 2026. For the 2026-27 state fiscal year, the general fund appropriation and the reappropriated funds appropriation from the firefighter benefits cash fund to the department of local affairs for firefighter heart and circulatory malfunction benefits are each decreased by $150,000. For the 2026-27 state fiscal year, the general fund appropriation to the department of public safety for use by the division of criminal justice for first responder employer health benefit trusts is decreased by $100,000.(Note: This summary applies to this bill as enacted.)
Beginning in state fiscal year 2027-28, the act requires the department of public safety (department) to submit a budget request for community corrections and to include in its budget request information regarding projected community corrections program needs, including certain data points and analysis related to residential and nonresidential bed capacity, the per diem reimbursement rate for each bed type, and other guideposts related to community corrections appropriations. The department must include information on the budget request in its yearly 'SMART Act' hearing.(Note: This summary applies to this bill as enacted.)
The act:Authorizes the health insurance affordability enterprise (enterprise), on or after January 1, 2027, to issue revenue bonds of up to $100 million to fund enterprise programs, secured by the enterprise's revenues, and require the enterprise to pay bond obligations before allocating revenues for enterprise programs;Allows the enterprise to invest specified money in the health insurance affordability cash fund (cash fund) without regard to otherwise applicable requirements for such investments and to contract with private professional fund managers to advise on investment strategies;Modifies the allocation of enterprise revenue among authorized purposes and allows the enterprise to reallocate unexpended amounts for specified purposes;Directs the enterprise to require qualified individuals who are enrolled in state-subsidized individual health coverage plans eligible for subsidies from the enterprise to pay premiums established in rules adopted by the commissioner, in consultation with the health insurance affordability board (board);Requires the enterprise to adjust the statewide average premium reduction under the reinsurance program to 18% and to reduce the amount of bonds issued to account for the reduced costs for the reinsurance program;Directs the board, in recommending parameters for implementing subsidies for state-subsidized individual health coverage plans, to recommend coverage that prioritizes enrollment stability and customer predictability; when seeking input on its recommendations regarding plans, coverage, and the number of eligible slots, to enable feedback in at least English and Spanish and in other languages upon request; and to indicate how it incorporated such feedback into its final recommendations;Directs the enterprise to conduct or contract a third party to conduct a study to evaluate the feasibility of restructuring the enterprise programs to increase health insurance affordability and maximize enrollment in health insurance plans;Requires the enterprise to submit 3 written reports and make one in-person presentation to the joint budget committee each year regarding the status of the cash fund and, as part of its in-person presentation in January 2027, to provide an analysis of the effects of changing the statewide average premium reduction under the reinsurance program to 15% and of creating a tiered, income-based, structure for premium assistance for individuals who purchase insurance on the Colorado health benefit exchange (exchange);Repeals the tax credit for contributions to the exchange and replaces it with a tax credit for contributions to the enterprise; andDirects the state treasurer to transfer $40 million from the marijuana tax cash fund to the cash fund by June 30, 2026, reduces to $60 million the designation of money in the marijuana tax cash fund as the state emergency reserve for the 2025-26 and 2026-27 state fiscal years, and increases by $40 million the value of the capitol annex building for purposes of the state emergency reserve for the 2025-26 and 2026-27 state fiscal years.(Note: This summary applies to this bill as enacted.)
To improve the clarity and certainty of the statutes, the bill amends, repeals, and reconstructs various statutory provisions of law that are obsolete, imperfect, or inoperative. The specific reasons for each amendment or repeal are set forth in the appendix to the bill. The amendments made by the bill are not intended to change the meaning or intent of the statutes.(Note: This summary applies to this bill as enacted.)
The act addresses security measures for the legislative department and judicial department of state government, for the governor, and for certain elected officials and candidates for elected office. Sections 1 through 4 and sections 6 and 7 of the act create the position of the administrator of legislative safety for the general assembly, address the authority of the Colorado state patrol (state patrol) in the state capitol buildings complex (capitol complex), and change the current position of chief security officer to the sergeant at arms. Specifically, section 1 authorizes the executive committee of the legislative council (executive committee) to, subject to available appropriations, appoint an administrator of legislative safety to serve as the primary point of contact for members of the general assembly on all matters relating to their personal safety and security and to coordinate, in collaboration with the Colorado state patrol, security and protection for members of the general assembly, employees of the general assembly, and other individuals specified by the executive committee (covered individuals). The administrator of legislative safety performs their duties under the direction and supervision of the executive committee and, with approval of the executive committee, may appoint additional personnel as necessary to perform the functions assigned to the administrator of legislative safety. In fulfilling their duties, the administrator of legislative safety shall coordinate with the Colorado state patrol and may coordinate with local law enforcement agencies and with the sergeants at arms of each house of the general assembly. Sections 2 and 3 change the title of the chief security officer, which each house of the general assembly is authorized to appoint, to the sergeants at arms. Section 2 specifies that each house that appoints sergeants at arms may consult with the administrator of legislative safety in connection with the supervision of the sergeants at arms. Section 4 specifies that the administrator of legislative safety is a peace officer whose authority includes enforcing all laws of the state and who may be certified by the P.O.S.T. board. Section 5 specifies that the Colorado state patrol's jurisdiction includes law enforcement services for the governor's mansion. Existing law requires the state patrol to provide protection for members of the general assembly when they are present in the capitol complex and, under certain circumstances, when they attend functions held elsewhere in the state. Section 6 includes other covered individuals under the state patrol's protection when they are present in the capitol complex. In addition, section 6 clarifies that the state patrol's jurisdiction includes law enforcement services for the capitol complex and requires the state patrol to coordinate its law enforcement efforts in the capitol complex with the administrator of legislative safety. Existing law grants the city and county of Denver jurisdiction to enforce the laws of the state for the security of people and property in the capitol complex. Section 7 clarifies that this authority is in addition to the jurisdiction of the state patrol to enforce the laws of the state in the capitol complex. Sections 8 through 10 address various other security concerns for certain elected officials. All candidate committees, political committees, small donor committees, and political parties are required to register with the secretary of state (secretary) or municipal clerk, as applicable, before accepting or making any campaign contributions. Registration requires the submission of a statement listing, among other items, a street address for the principal place of operations of the committee or party. Section 8 specifies that the address may be a street or mailing address. The secretary is required to make all candidate disclosure statements filed with the secretary available to the public on the secretary's website. Section 9 requires the secretary to redact the candidate's address and other personal information before making a disclosure statement available on the secretary's website and allows the secretary to modify the disclosure form to eliminate the inclusion of personal information. Existing law requires specified elected and appointed state officials to file a financial disclosure statement with the secretary that includes, among other items, the legal description of any interest in real property with a market value that exceeds $5,000. Section 10 eliminates the requirement to include a legal description of the property and replaces it with a requirement to identify the city and county in which the property is located. Section 10 also requires the secretary to redact the address and other personal information of elected officials before posting the disclosure statement on the secretary's website and allows the secretary to modify the disclosure form to eliminate the inclusion of personal information. Section 11 requires a sheriff who provides security for a court to use the recommended standards developed by the judicial security task force created in the act to implement security measures for court facilities. The county sheriff shall, to the extent practicable, maintain one secure, single-point access to a court facility and use magnetometers when the court is in session. The county sheriff shall also verify that an individual who enters a courthouse with a firearm is not prohibited from carrying a firearm in a courthouse pursuant to existing law and maintain a log including specified information regarding each individual who enters a courthouse with a firearm; except that this verification and logging requirement does not apply to peace officers employed in the courthouse by the county sheriff. Sections 12 through 14 modify the assessment and collection of the court security surcharge, and sections 15 and 16 address other judicial security concerns. Under existing law, courts assess and collect a $5 court security surcharge on certain court filing fees ($5 surcharge). The money from the $5 surcharge is deposited in the court security cash fund, which is distributed to counties through grants made by the court security cash fund commission for the counties to use for purposes related to the security of facilities containing a state court or probation office. Section 12 ends the assessment and collection of the $5 surcharge on June 30, 2027, and transfers the balance of the court security cash fund on August 31, 2027, to the court security authority (authority), which is created in the act. Section 13 repeals the $5 surcharge, the court security cash fund, and court security cash fund commission on September 1, 2027. Section 14 creates the court security authority as a special purpose authority. Beginning on July 1, 2027, the authority imposes a $10 court security surcharge ($10 surcharge) on the same court filings on which the $5 surcharge was assessed and collected. The courts assess and collect the $10 surcharge and transmit the surcharge money to the authority and the authority is required to use the money from the surcharge to provide grants to counties for the same purposes for which grants from the $5 surcharge were made. The authority may also use money from the $10 surcharge to provide grants to the state court administrator's office for system-wide security needs. The act creates the court security authority board, which initially consists of the same members that comprised the court security cash fund commission and requires the board to award the grants based on specified criteria. Section 15 creates a judicial security task force in the judicial department to develop recommended standards for security at courthouses and other court and probation facilities. Existing law specifies that an individual commits retaliation against a judge if the individual makes a credible threat or commits an act of harassment, or an act of harm or injury upon a person or property as retaliation or retribution against a judge. Section 16 includes judicial employees in this law. Existing law allows specified individuals, defined as 'protected persons', to request that state or local government officials remove their personal information from records that are available on the internet. Under existing law, it is unlawful to post a protected person's personal information on the internet in certain circumstances. In addition to other modifications to this law, section 17 adds judicial employees, staff of the general assembly, and elected officials to the definition of 'protected person'. Section 17 also establishes civil remedies for a protected person recoverable from a person who is not a state or local government official and who has published the protected person's personal information if the person does not remove the personal information upon request. Section 18 prohibits a person from making the personal information of specified elected officials and an elected official's immediate family publicly available on the internet if the person knows or reasonably should know that doing so will pose an imminent and serious threat to the elected official or the elected official's immediate family. Section 18 also allows an elected official to file a request with a state or local government official to redact the elected official's personal information from records that the state or local government official makes available on the internet. Certain specified parties may access, in certain circumstances, a record that includes information otherwise subject to redaction pursuant to this requirement. Sections 19 through 25 repeal, from each applicable court filing fee, the $5 surcharge that is transmitted to the court security cash fund and implement, for each applicable court filing fee, the $10 surcharge that is transmitted to the authority.(Note: This summary applies to this bill as enacted.)
On January 20, 2026, as part of its reporting duties pursuant to the 'State Measurement for Accountable, Responsive, and Transparent (SMART) Government Act', or 'SMART Act', the department of law (DOL) submitted to the house of representatives and senate judiciary committees a report entitled 'Department of Law: 2026 Legislative Priorities' (DOL report). The DOL report recommended that the general assembly make various changes to laws concerning the powers and duties of the attorney general and the DOL. The act implements recommendations from the DOL report as follows: Recommendation 1 of the report is to allow the DOL to enter into interagency agreements with certain state agencies to improve data sharing and coordination. Section 14 of the act implements this recommendation. Recommendation 2 is to amend the 'Colorado Consumer Protection Act' (CCPA) to allow the DOL to enforce as an unfair or deceptive trade practice the knowing or reckless practice of a profession or occupation despite failing to attain the qualifications required by law. Section 9 implements this recommendation. Recommendation 3 is to require the DOL to regularly review its administrative rules to ensure they are meeting certain objectives. Section 95 implements this recommendation. Recommendation 4 is to amend the DOL's subpoena authority in pattern-and-practice investigations of government authorities so that it aligns with the DOL's subpoena authority in investigating alleged violations of the CCPA. Section 96 implements this recommendation. Recommendation 6 is to allow the DOL to notify the joint budget committee if an introduced bill poses a new or increased risk of litigation that may result in a significant impact to the state budget and to enter into an executive session with the joint budget committee to discuss the matter. Sections 1, 94, and 95 implement this recommendation. Recommendation 7 is to provide sunset reviews of existing title and degree protections under the CCPA. Sections 19 and 97 implement this recommendation. Recommendation 9 is to codify certain principles of a recent settlement of litigation involving the National Association of Realtors in order to maintain transparency and prevent anticompetitive practices in the real estate market. Sections 87 and 88 implement this recommendation. Recommendation 10 is to establish certain advisory councils within the DOL. Sections 2, 6, 15, and 34 implement this recommendation. Recommendation 11 is to clarify that the scope of a recently enacted cap on medical debt interest applies only to direct medical costs. Section 5 addresses this recommendation. Recommendation 12 is to consolidate overlapping violations within the CCPA. Sections 7, 8, 9, 10, 11, 12, 13, 23, 24, 26, 27, 88, 90 through 92, 99, 100, 102, 104, and 105 implement this recommendation. Recommendation 13 is to make certain changes to the membership and reporting duties of the state substance abuse trend and response task force. Section 93 implements this recommendation. Recommendation 14 is to strengthen disclosure requirements concerning developer contract cancellation clauses in real estate purchase contracts by requiring a broker to advise a consumer to seek legal advice before executing a purchase contract if the broker is representing a consumer in a transaction for which a principal to the transaction, including a home builder, a bank, or a buyer, requires the consumer to use a purchase contract created by the principal. Section 89 implements this recommendation. Recommendation 15 is to make nonsubstantive and nontechnical updates to statutory provisions involving the DOL's performance of its duties, including updates to gendered language. Sections 3, 4, 7, 9, 10, 11, 16, 17, 18, 21, 22, 24 through 27, 29 through 33, 35 through 86, and 101 implement this recommendation. Recommendation 16 is to authorize the DOL to recover and reinvest costs associated with the enforcement of the 'Colorado Medicaid False Claims Act'. Sections 98 and 103 implement this recommendation. The final recommendation is to establish a new procurement framework for the DOL to allow it to meet its demands and fulfill its statutory duties. Section 95 implements this recommendation.(Note: This summary applies to this bill as enacted.)
The act creates the Colorado behavior analyst licensing board (board) under the direction and supervision of the division of professions and occupations in the department of regulatory agencies. On and after July 1, 2028, an individual is prohibited from engaging in or offering the practice of applied behavior analysis unless the individual is licensed by the board. The board is authorized to license behavior analysts and assistant behavior analysts if they meet the requirements specified by the act and the rules adopted by the board pursuant to the act. An individual who seeks to practice as a behavior analyst or assistant behavior analyst must meet the following requirements:File an application for a license;Have a valid certification in good standing with a certifying entity;Complete a fingerprint-based criminal history record check;Carry professional liability insurance in an amount determined by the board by rule unless working as a public employee covered under governmental immunity; andIf the individual seeks to practice as an assistant behavior analyst, be supervised by a licensed behavior analyst and practice within the scope of practice established by rules of the board. The board may deny or refuse to renew a license, suspend or revoke a license, impose probationary conditions on a license, or issue a cease-and-desist letter or seek injunctive relief against a licensee or an applicant for licensure who has engaged in specified grounds for discipline or unprofessional conduct. The board may also send a licensee a letter of admonition or a confidential letter of concern under certain circumstances. The act exempts specified individuals from the licensing requirements established by the act. An individual who practices or offers or attempts to practice as a behavior analyst or assistant behavior analyst without being licensed pursuant to the act and who is not exempted from licensure commits a class 2 misdemeanor. The board may adopt rules as necessary to implement the act. The regulation of behavior analysts and assistant behavior analysts is scheduled for repeal on September 1, 2031. Before the repeal, the functions of the board in regulating applied behavior analysis are scheduled for review in accordance with the sunset law. The act requires the department of health care policy and financing (state department) to reimburse an applied behavior analysis provider for applied behavior analysis services provided by a behavior technician certified by a certifying entity to a medicaid member with autism spectrum disorder or other conditions for which coverage may be available under state department policies. Subject to federal approval, the state department shall reimburse the applicable applied behavior analysis provider for applied behavior analysis services provided by a behavior technician who is required by the state department to be certified by a certifying entity, but is not certified at the time of services, for services provided during one temporary period of not less than 45 days while the behavior technician is pursuing the certification if specified conditions are met. The department of human services (department) is required to prescribe and publish standards for the licensing and regulation of applied behavior analysis clinics (clinics). The department is authorized to adopt rules concerning specific subjects related to standards for clinics. Clinics are required to comply with specified requirements regarding local government zoning regulations, licensing fees, and qualifications for employees of the clinics. The act changes the definition of 'day treatment center' to 'day treatment facility' and requires that facilities that were not subject to the definition before the effective date of the act but that meet the amended definition submit an application for licensure by the department on or before August 1, 2026 , and become licensed before August 1, 2027.(Note: This summary applies to this bill as enacted.)
