Rep. Jamie Jackson

The act implements the recommendations of the department of regulatory agencies in its 2025 sunset review and report by:Continuing the fire suppression programs of the division of fire prevention and control (division) for 11 years until September 1, 2037, pursuant to the provisions of the sunset law; andModifying certain provisions of the fire suppression programs of the division to replace gender-specific terminology with gender-neutral terminology.(Note: This summary applies to this bill as enacted.)

The act requires an entity that requires an individual to provide a social security number for a background check for a non-employment-based educational opportunity to accept an individual's taxpayer identification number in lieu of a social security number, including in clinical educational experiences for health-related academic programs, subject to certain exceptions.     A licensed or certified hospital or covered school, or a state institution of higher education or local district college that offers a non-employment-based educational opportunity that involves work with a vulnerable population, shall accept either an applicant's taxpayer identification number or a fingerprint-based background check in lieu of a social security number.     An applicant for a non-employment-based educational opportunity that involves work with a vulnerable population at a licensed or certified hospital or covered school, or a state institution of higher education or local district college, is permitted to have their fingerprints taken by a local law enforcement agency or an entity approved by the Colorado bureau of investigation for taking fingerprints for the purpose of a background check. A licensed or certified hospital or covered school, or state institution of higher education or local district college, must determine who pays the fee for the fingerprint-based background check.     The attorney general is authorized to bring a civil action to enforce the provisions of the act. An entity that violates this act is subject to a civil penalty of $2,000 for the first violation and $5,000 for each subsequent violation.(Note: This summary applies to this bill as enacted.)

The act creates a statutory cause of action for a person who has their federal constitutional rights violated by another person who, acting under color of law, is participating in civil immigration enforcement. A person who violates the United States constitution while participating in civil immigration enforcement and whose conduct was the proximate cause of violating another person's constitutional rights is liable to the person whose rights are violated for legal or equitable relief or any other appropriate relief. The action must be commenced within 2 years after the cause of action accrues.     The act appropriates $125,604 to the department of law from the legal services cash fund to provide legal services for the department of personnel.(Note: This summary applies to this bill as enacted.)

The act creates the 'Colorado Mandatory Lethality Assessment Act', which requires peace officers to conduct a lethality assessment when responding to a domestic violence incident and include the completed lethality assessment in the incident report. A peace officer is not required to administer a lethality assessment if a victim is unavailable, not at the scene, incapacitated, or if circumstances otherwise make the administration of the lethality assessment impossible or impracticable. If the lethality assessment indicates that an individual is a high-risk victim, or if the lethality assessment does not indicate a victim is high-risk but a peace officer determines an individual is a high-risk victim based on the totality of the circumstances, the peace officer is required to immediately contact a community-based victim's advocate either by phone or in person and provide the high-risk victim the opportunity to speak with the advocate.     The act requires the attorney general's office, in consultation with a Colorado-based coalition that advocates for survivors of domestic violence, to develop a mandatory training for peace officers to learn how to administer the lethality assessment and provide victim referrals. No later than June 1, 2027, the attorney general is required to make the training available and offer assistance to law enforcement agencies in providing the training. Beginning July 1, 2027, the act requires each law enforcement agency to ensure that each peace officer employed by the agency has completed the mandatory training; except that a law enforcement agency that has provided training on the administration of lethality assessments prior to July 1, 2027, is not required to provide additional training.     Beginning January 2028, and each January thereafter, the act requires the attorney general's office to report to the general assembly certain information related to lethality assessments conducted in the previous calendar year. No later than January 31, 2030, the domestic violence fatality review board shall evaluate the effectiveness of mandatory lethality assessments and referrals to resources and submit the evaluation to the general assembly.     The act does not impose criminal, administrative, or civil liability on any person for an act or omission made in good faith related to administering a lethality assessment.(Note: This summary applies to this bill as enacted.)

For purposes of the 'Victim Rights Act', the act prohibits a defendant or alleged offender in the underlying case from being the 'lawful representative' of a victim or the victim's designee if the victim is a child or an at-risk adult.     The act creates new rights for a victim under the 'Victim Rights Act', including the right to:Be notified by the district attorney if the district attorney receives a notice that a crime laboratory employee engaged in a wrongful action that includes a crime against the victim and a notice that an evidentiary hearing on post-conviction petition for relief is held;Request to be referred to by an abbreviation, pseudonym, initials, or another preferred name during hearings; andBe heard at a restitution assessment hearing.(Note: This summary applies to this bill as enacted.)

The act allows the joint technology committee (JTC), within 90 days after the day that the chief information security officer of the office of information technology (security officer) files a written information technology security compliance report (compliance report) with the JTC as required by the act, to vote to request that the legislative audit committee direct the state auditor to conduct a special information technology security audit (IT security audit) of the office of information technology (OIT) if the compliance report indicates that one or more audit recommendations made by the state auditor is unresolved 2 or more years past the implementation date for the audit recommendation or if a material discrepancy exists between a representation in the compliance report and a previous audit finding.     If the JTC votes to request an IT security audit and if the legislative audit committee votes to direct the audit, the act requires:The state auditor to conduct the IT security audit;The state auditor to obtain input from OIT when the state auditor determines the scope and boundaries of the audit;The state auditor to submit the IT security audit report to the legislative audit committee, the JTC, the joint budget committee, and the governor; andOIT to reimburse the state auditor for the auditor's costs incurred in completing the IT security audit.     The act requires OIT to establish, maintain, keep, update, and make available to state agency information technology leadership and the members of the JTC a list of all active information technology vendor contracts for state agencies.     The act specifies that, except in the case of an information technology security emergency, OIT shall not publish or implement a technical information technology standard, and that the standard is void, unless the standard:Was publicly posted; andReceived approval from the security officer if the standard relates to security, access controls, or the handling of data.     The act requires OIT to ensure that, if an information technology contract provides ongoing service and delivery to Coloradans, the contract maintains current architecture diagrams that are updated at least annually.     The act prohibits the chief information officer from delegating a duty, responsibility, or power of the security officer.     The act requires the security officer to submit 2 annual reports to the JTC. The first report is a written compliance report that includes OIT's current compliance status with applicable security standards; all open audit recommendations regarding OIT made by the state auditor and the date on which each recommendation was made; and a timeline for remediation and a mitigation plan or compensation controls for each open audit recommendation made by the state auditor.     The second report is a written statewide information technology security risk report (security risk report) that assesses the overall security risk posture of state agency information technology systems. To support the preparation of the security risk report, the security officer may conduct evaluations of state agency information technology systems, including penetration testing, vulnerability scanning, configuration evaluations, and vendor and system reviews. Each state agency shall provide to the security officer, upon request, the access and information necessary to conduct evaluations of state agency technology systems, including system access, product information, and architecture information.     The act requires the security officer, or the chief information officer if the security officer is unavailable, to perform the duties and uphold the responsibilities assigned to the security officer pursuant to law.(Note: This summary applies to this bill as enacted.)

Beginning in state fiscal year 2027-28, the act requires the department of public safety (department) to submit a budget request for community corrections and to include in its budget request information regarding projected community corrections program needs, including certain data points and analysis related to residential and nonresidential bed capacity, the per diem reimbursement rate for each bed type, and other guideposts related to community corrections appropriations.     The department must include information on the budget request in its yearly 'SMART Act' hearing.(Note: This summary applies to this bill as enacted.)

The act:Authorizes the health insurance affordability enterprise (enterprise), on or after January 1, 2027, to issue revenue bonds of up to $100 million to fund enterprise programs, secured by the enterprise's revenues, and require the enterprise to pay bond obligations before allocating revenues for enterprise programs;Allows the enterprise to invest specified money in the health insurance affordability cash fund (cash fund) without regard to otherwise applicable requirements for such investments and to contract with private professional fund managers to advise on investment strategies;Modifies the allocation of enterprise revenue among authorized purposes and allows the enterprise to reallocate unexpended amounts for specified purposes;Directs the enterprise to require qualified individuals who are enrolled in state-subsidized individual health coverage plans eligible for subsidies from the enterprise to pay premiums established in rules adopted by the commissioner, in consultation with the health insurance affordability board (board);Requires the enterprise to adjust the statewide average premium reduction under the reinsurance program to 18% and to reduce the amount of bonds issued to account for the reduced costs for the reinsurance program;Directs the board, in recommending parameters for implementing subsidies for state-subsidized individual health coverage plans, to recommend coverage that prioritizes enrollment stability and customer predictability; when seeking input on its recommendations regarding plans, coverage, and the number of eligible slots, to enable feedback in at least English and Spanish and in other languages upon request; and to indicate how it incorporated such feedback into its final recommendations;Directs the enterprise to conduct or contract a third party to conduct a study to evaluate the feasibility of restructuring the enterprise programs to increase health insurance affordability and maximize enrollment in health insurance plans;Requires the enterprise to submit 3 written reports and make one in-person presentation to the joint budget committee each year regarding the status of the cash fund and, as part of its in-person presentation in January 2027, to provide an analysis of the effects of changing the statewide average premium reduction under the reinsurance program to 15% and of creating a tiered, income-based, structure for premium assistance for individuals who purchase insurance on the Colorado health benefit exchange (exchange);Repeals the tax credit for contributions to the exchange and replaces it with a tax credit for contributions to the enterprise; andDirects the state treasurer to transfer $40 million from the marijuana tax cash fund to the cash fund by June 30, 2026, reduces to $60 million the designation of money in the marijuana tax cash fund as the state emergency reserve for the 2025-26 and 2026-27 state fiscal years, and increases by $40 million the value of the capitol annex building for purposes of the state emergency reserve for the 2025-26 and 2026-27 state fiscal years.(Note: This summary applies to this bill as enacted.)

The act creates the Colorado behavior analyst licensing board (board) under the direction and supervision of the division of professions and occupations in the department of regulatory agencies. On and after July 1, 2028, an individual is prohibited from engaging in or offering the practice of applied behavior analysis unless the individual is licensed by the board. The board is authorized to license behavior analysts and assistant behavior analysts if they meet the requirements specified by the act and the rules adopted by the board pursuant to the act.     An individual who seeks to practice as a behavior analyst or assistant behavior analyst must meet the following requirements:File an application for a license;Have a valid certification in good standing with a certifying entity;Complete a fingerprint-based criminal history record check;Carry professional liability insurance in an amount determined by the board by rule unless working as a public employee covered under governmental immunity; andIf the individual seeks to practice as an assistant behavior analyst, be supervised by a licensed behavior analyst and practice within the scope of practice established by rules of the board.     The board may deny or refuse to renew a license, suspend or revoke a license, impose probationary conditions on a license, or issue a cease-and-desist letter or seek injunctive relief against a licensee or an applicant for licensure who has engaged in specified grounds for discipline or unprofessional conduct. The board may also send a licensee a letter of admonition or a confidential letter of concern under certain circumstances.     The act exempts specified individuals from the licensing requirements established by the act.     An individual who practices or offers or attempts to practice as a behavior analyst or assistant behavior analyst without being licensed pursuant to the act and who is not exempted from licensure commits a class 2 misdemeanor.     The board may adopt rules as necessary to implement the act.     The regulation of behavior analysts and assistant behavior analysts is scheduled for repeal on September 1, 2031. Before the repeal, the functions of the board in regulating applied behavior analysis are scheduled for review in accordance with the sunset law.     The act requires the department of health care policy and financing (state department) to reimburse an applied behavior analysis provider for applied behavior analysis services provided by a behavior technician certified by a certifying entity to a medicaid member with autism spectrum disorder or other conditions for which coverage may be available under state department policies. Subject to federal approval, the state department shall reimburse the applicable applied behavior analysis provider for applied behavior analysis services provided by a behavior technician who is required by the state department to be certified by a certifying entity, but is not certified at the time of services, for services provided during one temporary period of not less than 45 days while the behavior technician is pursuing the certification if specified conditions are met.     The department of human services (department) is required to prescribe and publish standards for the licensing and regulation of applied behavior analysis clinics (clinics). The department is authorized to adopt rules concerning specific subjects related to standards for clinics. Clinics are required to comply with specified requirements regarding local government zoning regulations, licensing fees, and qualifications for employees of the clinics.     The act changes the definition of 'day treatment center' to 'day treatment facility' and requires that facilities that were not subject to the definition before the effective date of the act but that meet the amended definition submit an application for licensure by the department on or before August 1, 2026 , and become licensed before August 1, 2027.(Note: This summary applies to this bill as enacted.)

Current law requires that, before an individual is permitted to act as a transportation network company (TNC) driver through the use of a TNC's digital network, the individual shall obtain a criminal history record check. The act requires that the TNC:If the TNC has at least 20,000 rides occurring monthly (large-scale TNC) on its digital network, pay for the required criminal history record check for an individual before the individual is permitted to act as a driver;Procure a privately administered criminal history record check for a driver at least once every 6 months after the initial criminal history record check;Share the results of each criminal history record check with the driver who is the subject of the record check; andProcure a privately administered criminal history record check if a person files a complaint against a driver with the TNC or the public utilities commission (commission) regarding specified allegations. The TNC shall pay the costs of the privately administered criminal history record checks.     A TNC shall create a deactivation and suspension policy to initiate a review of a driver for deactivation within 7 business days if the TNC is notified through a complaint filed with the TNC or the commission or is contacted by the attorney general's office, a district attorney's office, or a law enforcement agency regarding certain allegations against the driver. A driver who has been deactivated may challenge the deactivation through the TNC's deactivation and suspension policy. The act requires the commission to create a process by rule for sharing information between TNCs regarding the deactivation of drivers. A TNC's deactivation and suspension policy must include meaningful human review of the permanent deactivation of a driver.     The act requires a TNC to provide regular safety training to each driver and rider in accordance with rules adopted by the commission.     If a person files a complaint against a TNC or a driver, the TNC shall respond to a subpoena or search warrant for information related to the complaint from a court, the attorney general's office, a district attorney's office, the commission, or a law enforcement agency no later than 72 hours after the request is made, unless the subpoenaing party agrees to a different deadline.     The act requires the commission to adopt rules on or before June 1, 2028, establishing requirements for a TNC to ensure that a driver or rider may opt in to audio and video recording of each prearranged ride and integrate audio and video recording into the TNC's digital platform. A large-scale TNC shall not charge a fee or increase the cost of a prearranged ride solely on the basis of a rider opting in to audio and video recording of the prearranged ride. The commission shall also adopt rules regarding access to, ownership of, storage of, notification about, and deadlines for the implementation of the audio and video recordings, including different requirements for large-scale and small-scale TNCs.     A provision in a contract between a TNC and a driver or rider is declared void as against public policy if the provision attempts or purports to waive specified rights.     The act requires that, on or before February 1, 2027, and on or before February 1 each year thereafter, a TNC shall submit specified data related to incidents involving safety and discrimination to the commission, the attorney general, and each member of the general assembly.     The act requires a TNC to develop policies to:Prevent imposter drivers, account sharing, and account renting;Prevent sexual assault, physical assault, and homicide against or committed by the TNC's drivers;Prohibit the transportation of an unaccompanied youth who is under 15 years old unless the youth is part of a duly authorized family account;Allow a driver to refuse a prearranged ride to an individual who is not authorized to use the account requesting the prearranged ride;Notify and train drivers and riders of any updates to TNC safety policies;Prohibit drivers from offering, selling, or providing food or beverages that are not factory-sealed to riders;Require drivers to report information regarding a conviction of or a plea of guilty or nolo contendere to specified offenses; andPrevent crimes committed against drivers by riders.     A TNC is prohibited from:Altering the rating a rider assigned to a driver or the rating a driver assigned to a rider on a TNC's digital platform;Assigning an automatic or default driver rating that the rider did not assign; orAssigning an automatic or default rider rating that the driver did not assign.     A TNC may delete ratings or reviews that are plausibly motivated by fraud or bias. A TNC shall not consider negative ratings or reviews that are motivated by fraud or bias in a review of a driver for deactivation or an internal deactivation reconsideration.     A TNC is prohibited from collecting biometric data or biometric identifiers from a driver or rider without first obtaining the consent of the driver or rider. If a TNC collects biometric data or biometric identifiers from a driver or rider, the TNC shall comply with specified provisions of the 'Colorado Privacy Act' regarding biometric data and biometric identifiers.     A TNC that violates the act may be assessed a civil penalty of not more than $1,500 per violation.(Note: This summary applies to this bill as enacted.)