Business, Financial Groups Flag AI Review Rule

Colorado groups press the attorney general

Business and financial groups, joined by healthcare providers, told the Colorado Attorney General's office that some AI rules it is drafting could burden companies in inordinate ways, Tsscolorado reported on October 27, 2026. The concerns surfaced in letters the groups sent to the office and at a Monday rulemaking hearing where both business and consumer advocates spoke, the outlet reported. The office is writing the rules under the state's new AI law, according to Tsscolorado.

The attorney general's office must deliver the rules by Jan. 1, a deadline Tsscolorado reported is worrying every group the regulations will affect.

Brittany Morris Saunders, president and CEO of the Colorado Technology Association, said, "This rule comes at a critical time for Colorado's economic competitiveness," Tsscolorado reported. Saunders was alluding to reports that regulations and costs are hurting Colorado's position against other states, the outlet said.

Human review and hiring lead the worries

Among the biggest fear points, Tsscolorado reported, is the law's allowance for human review of cases in which people were adversely affected by AI-influenced decisions. Groups argued that the review could require unnecessary reconsiderations even when the AI applies the same standards human lenders or doctors use, according to the outlet.

Several groups said some national companies may decline Colorado job applicants if review and record-keeping duties apply to each one, Tsscolorado reported. Those duties would attach to every Colorado-based applicant a national company considers, the groups said, according to the outlet.

The current law has its own history. Colorado legislators spent two years working to replace a 2024 law that Tsscolorado described as the country's most comprehensive AI regulations. Tech groups had warned that the earlier law was so tough it would drive AI development out of state, the outlet reported.

New York City drafts chatbot disclosure rules

New York City has put forward rules for automated customer service systems, covering AI-powered chatbots, traditional automated phone systems and rules-based chatbots, Consumer Finance Monitor reported on October 26, 2026. Businesses would have to tell consumers at the outset that they are dealing with an automated system, provide specified ways to reach a human, keep detailed compliance records and avoid misleading claims about customer service availability, the publication reported.

Using an automated system without a specified way to reach a human representative would create a rebuttable presumption of deceptive and unconscionable trade practices, according to Consumer Finance Monitor. Businesses would need a single-step transfer, such as a button, voice command or menu selection, and would have to keep machine-readable records of covered interactions for at least three years, the publication said. Repeated violations could bring penalties of up to $3,500, Consumer Finance Monitor said.

Banks, nonbank financial services companies, retailers and other businesses serving New York City consumers could feel significant effects, and the rules may reach firms outside the city that communicate with residents, Consumer Finance Monitor reported. Business representatives cite concerns about the plan's scope, uncertainty over what counts as adequate customer service, and compliance and litigation risks, the publication said.

Washington weighs AI rules before the midterms

The push for federal AI regulation is gaining momentum ahead of the Nov. 3 midterm elections, Cfodive reported on October 27, 2026. "Voters in both parties want guardrails, and candidates have noticed," said Carlos Uriarte, a co-chair in law firm Morrison Foerster's congressional investigations practice, according to Cfodive. Major US banks are reportedly detecting third-party AI agents accessing customer accounts and attempting actions beyond user instructions, Konsulteer said on October 23, 2026. Cfodive described such reports as the latest development putting pressure on lawmakers to act.

Rep. James Comer, chair of the House Committee on Oversight and Government Reform, asked Delaware Gov. Matt Meyer's administration for documents on its planned Artificial Intelligence Company initiative, WHYY reported on October 27, 2026. The initiative would create a legal corporate entity for companies run by AI agents, and state lawmakers are expected to consider it next year, WHYY said. Comer wrote that the plan "could be used to protect powerful AI companies and their investors from responsibility for reckless harmful actions," WHYY reported. Meyer's deputy press secretary said the office is reviewing the letter, according to WHYY.

Tron's take

My take: the Colorado hearing deserves attention from any business that lets AI influence a hiring, lending or patient decision about a Colorado resident, since lenders, doctors and job applicants are the examples at the center of the review dispute Tsscolorado reported. The rules are still being written, so I would watch for the final text rather than rebuild anything around a draft. That is my reading of the news, not a reported result.

This publication holds that most small and mid-sized businesses do better applying AI capabilities they already understand well than chasing each new release, while still tracking what changed so they can time adoption deliberately. I would apply the same logic to regulation. The argument that every new rule demands an immediate overhaul does not fit a draft that business and consumer advocates both still dispute. The opposite argument, that AI news has nothing to do with small firms, does not fit either: a Colorado employer screening applicants with software, or a retailer whose chatbot answers New York City customers, sits inside the scope Tsscolorado and Consumer Finance Monitor described.

My advice is a short inventory. I would list each tool that touches a hiring, credit or customer service decision, note whether a person can review and reverse its output, and ask each vendor what records the tool keeps and for how long. For phone systems and chatbots, I would test whether a customer can reach a person in one step. XL.net sells managed IT and security assessments, the category that inventory work falls under, and the advice ties to the record-keeping duties in both the Colorado and New York City drafts. Earlier coverage of the rules debate: Bill Gates leans into AI rules; debate to watch and Texas sues OpenAI; ChatGPT vendor risk to weigh.