Colorado AI denial law is silent on dental

Colorado's House passed its AI health care bill 47 to 15, and its Senate passed it 32 to 3 (Colorado General Assembly, March and May 2026). The governor signed HB26-1139 on June 2, 2026. If you run a dental practice in Colorado, or you are weighing a third site there, that vote count suggests a rule that touches you. We read the enacted text, and it does not. The word "dental" does not appear in it, and the duties it creates fall on insurers, not on you.

That gap is the useful finding. Seven states passed laws on AI in insurance coverage decisions in 2026 (RISE, August 2026), and a dental principal reading the headlines could easily conclude that payer AI is now policed in all of them. The text says something narrower, and the difference decides whether you act now or wait.

What HB26-1139 actually requires, and of whom

The bill's official title is "Use of Artificial Intelligence in Health Care." The rerevised text, the last version before passage, adds section 10-16-112.7 to Colorado's insurance statutes (Colorado General Assembly, May 2026). Three rules matter. First, an AI system may assist utilization review, including expedited approvals, but a carrier's denial based in whole or in part on medical necessity "shall not be issued solely on the output of an artificial intelligence system" without human review and approval by a licensed clinician, physician or other regulated professional competent to evaluate the clinical issues. Second, AI-assisted determinations must rest on the patient's individual clinical history and circumstances, not group data alone. Third, the entity must give written disclosures to the state, covering which review functions the AI serves, where in the process it is used, how human oversight works and how audit information is kept.

The covered entities are carriers, pharmacy benefit managers, private utilization review organizations and managed care entities, plus Medicaid and Children's Basic Health Plan payers for one psychotherapy provision (Colorado General Assembly legislative summary, 2026; RISE, August 2026). Dentists are not on the list. Neither are dental benefit plans, which the bill neither includes nor excludes: the text does not mention dental at all.

Two further points are easy to miss. The disclosure goes to the state, not to the provider, so nothing in the sections we read gives your practice a right to be told whether AI touched a denial. And the text contains no penalty or private right of action. The final fiscal note, dated July 8, 2026, describes the same insurer-side duties and also lists no penalties. The law takes effect January 1, 2027, subject to a possible referendum petition, and applies to actions on or after that date.

So what for you: HB26-1139 creates no compliance task for your practice. It is a rule about how payers decide, and whether it reaches the dental plans you bill is an open question that only the carrier or the Colorado Division of Insurance can answer.

The summary and the text do not match

One caution if you check this yourself. The bill's summary on the legislature's website describes a section requiring licensed professionals to tell clients how and when they use AI. In the rerevised text we read, section 4 is the effective-date clause, and the fiscal note does not mention a provider disclosure duty either. We could not reconcile the two, and the summary may describe an earlier version of the bill. The professional disclosure rule that does exist sits in a different Colorado law, HB 26-1195, which governs psychotherapy and applies from August 12, 2026 (see our explainer on the Colorado psychotherapy AI restrictions). That law binds mental health practitioners, not dentists.

The lesson holds beyond Colorado. Secondary summaries of AI statutes routinely attach provider duties to bills that regulate payers. Before you spend money on compliance, read the operative section, or ask counsel to.

So what for you: do not buy a "Colorado AI compliance" package for your dental practice on the strength of a summary. If a vendor sells one, ask which section of HB26-1139 it addresses.

Seven states, three already in force

Colorado is one of seven. RISE lists the others and their effective dates (August 2026): Washington SB 5395 (June 11, 2026), Iowa HF 2635 (July 1, 2026), Alabama SB 63 (October 1, 2026), then Colorado, Georgia SB 444 and Utah SB 319 (all January 1, 2027), and Illinois SB 3114 (January 1, 2028). Counting from today, October 12, 2026, three of the seven are already in force, three start on the same January date, and one waits until 2028. Indiana and Maryland add two related laws, on downcoding and on reporting adverse decisions. RISE's summary does not say whether any of the nine reaches dental plans, and neither do we, because the dental question has not been tested in the statutes we read.

The common principle is that an algorithm does not get the final word on a denial. Iowa's version lets AI support initial prior authorization review but not be the sole basis to deny, delay or downgrade, and requires a clinical peer to make the final call (RISE, August 2026). Georgia and Washington follow similar lines.

For a two-site group planning a third site, the practical effect is a patchwork. A payer's AI process in Washington may need human sign-off on a medical necessity denial, while the same carrier's process in a neighbouring state does not. Your admin team will not see that difference unless someone records it.

So what for you: if your expansion shortlist includes more than one state, add "state rule on payer AI" to the due diligence list next to licensure and lease terms, and ask each state's dental carriers how they apply it.

Where AI sits in your own claims workflow

The payer side is one half of the picture. The other half is yours. In the ADA Health Policy Institute's July 2026 survey, 43.3% of US dentists reported using AI for at least one type of task, and 13.6% used it for insurance verification, ahead of reception check-in at 10.1% and patient treatment recommendations at under 5%. Insurance work is where dentists are already comfortable letting software help, which is also where a payer's AI is most likely to meet yours.

Here is a worked example, and every input is an assumption for you to replace. Suppose your practice sends 40 predetermination or prior authorization requests a month, and 10% come back denied or delayed. That is four a month. If each takes 25 minutes of staff time to chase and appeal, you spend 100 minutes a month on it, 20 hours a year. At an assumed $30 an hour loaded staff cost, that is about $600 a year. The money is small. The exposure is not the cost per denial but the lack of a record: if a carrier later has to show a state regulator how its AI was overseen, your practice's dated log of denials, reasons and outcomes is evidence nobody else holds.

We have covered the cost side of payer friction before (see what Medicare's AI prior authorization pilot did to denial rates), and the liability question for practices that use AI themselves (who carries the risk when AI errs). The lesson from both is the same: the party with the cleaner paper trail has the stronger hand.

So what for you: the cheapest protection is a denial log, not a compliance programme. A shared spreadsheet with date, carrier, code, stated reason, whether a human reviewer is named and outcome costs nothing and starts building the record today.

What the evidence points toward

Frankly, if you run a dental practice, the maths says wait on legal spend and act on information. Three steps, in order. First, this month, write to your top three dental carriers and ask two questions: do you use AI in prior authorization or claims review for dental benefits, and do you consider HB26-1139 or any other state AI coverage law applicable to those plans? Keep the answers. Second, start the denial log above and fill it for 90 days, so you hold a baseline before January 1, 2027. Third, if you use AI for insurance verification or appeals drafting, confirm you have a signed HIPAA business associate agreement with the vendor, since a BAA covers the data-handling duty but not the other legal questions (see why "HIPAA compliant" does not mean safe).

Watch two dates: any referendum petition on HB26-1139 before it takes effect, and the first state agency disclosures after January 1, 2027, which may show how carriers describe their AI use. If you want a ranked list of which admin workflows in your practice are worth automating first, an AI Opportunity and Growth Assessment builds it from your own numbers, or you can book a free 20-minute call to talk it through.

Related: Colorado's AI psychotherapy restrictions explained  ·  5,944 denials: Medicare's AI pilot exposed  ·  0 AI malpractice cases. Insurers move first

Bill details are from the rerevised text of HB26-1139 (Colorado General Assembly, May 2026), its legislative summary page and the final fiscal note (July 8, 2026). Vote counts and the June 2, 2026 signing date are from the legislature's bill page. State effective dates and the seven-state list are from RISE (August 12, 2026), a secondary source; we did not read the other six statutes. The 40-request, 10% denial, 25-minute and $30 an hour figures are our own illustrative assumptions, not survey data. The ADA Health Policy Institute figures are from its July 2026 survey of US dentists. Whether dental benefit plans fall under HB26-1139 is unconfirmed: the text is silent. This article is for informational purposes only and does not constitute legal, billing or financial advice.