A Human in the Loop Is Not Yet a Human Safeguard
A consumer's right to reconsider an automated decision is meaningful only if the person reviewing it can do more than approve the original score. Colorado's ADMT framework therefore asks a specific question: could the reviewer understand the system and the individual's evidence, exercise independent judgment, and change the outcome when the facts or the system warrant it? This analysis distinguishes nominal human approval from Meaningful Human Review and shows why a review record is a safeguard, not a legal immunity.
The symptom: a person approves the output
Imagine the housing deposit decision from the previous example. A system recommends a $2,500 deposit because it infers elevated property risk from an applicant's rental history. An employee opens the result, sees that the system has marked it “approved,” and clicks a confirmation button. From an organizational perspective, a human participated. From the consumer's perspective, nothing meaningful changed: the employee may not have examined the underlying history, may not know what the score is intended to measure, and may have no authority to set a different amount.
Colorado's statute avoids treating that gesture as sufficient. Meaningful Human Review requires a person designated by the deployer who can approve, modify, or override a consequential decision; considers relevant, available primary evidence; is trained to conduct the review; does not default to the system output; and has enough information to understand the output's intended use, material limitations, input categories, and principal factors. The reviewer does not need the system's source code or model weights, but must have the information needed to exercise judgment.
The rulemaking document adds an important operational test: meaningful review is review that could change the adverse outcome. A reviewer who is required to follow the output, lacks access to relevant evidence, or can only confirm a pre-set result may be human in a procedural sense without being a meaningful safeguard. The difference is not how many clicks a person makes. It is whether the review creates a real decision point after the automated output.
The reviewer needs independence, evidence, and authority
The rules treat the reviewer as a decision-maker with institutional conditions, not as a decorative checkpoint. Whenever feasible, the reviewer should be independent of the person who made the original decision and should not be that person's subordinate. The reviewer must have subject-matter understanding proportionate to the nature and potential harm of the adverse outcome. Training should cover accuracy and objectivity, the information considered by the system and the relevant decision factors, and the subject matter needed to identify and understand additional primary evidence.
Authority is equally important. A reviewer who can recommend reconsideration but cannot change the result has less power than one who can approve, modify, or override it. The rules say the reviewer must not be steered by upper management in a way that influences the decision and should be protected from retaliation. The ADMT may not assist in the Meaningful Human Review itself. The point is to prevent the original system from becoming both the object of challenge and the judge of whether its own output should stand.
These conditions address different failure modes. If the reviewer lacks information about the model's intended use, they may treat an output as reliable outside its documented purpose.