Colorado Rideshare Safety Law Takes Effect Tomorrow With New Sexual Assault Protections

Colorado passengers using Uber, Lyft and other rideshare services will gain new protections beginning August 12 under a state law designed in part to strengthen how companies respond to sexual assault, stalking, harassment and other serious safety complaints, according to a story, produced as part of the Colorado Capitol News Alliance and reported by Andrea Kramar of Rocky Mountain Public Broadcasting System (RMPBS).

House Bill 26-1424, known as the Colorado Rideshare Safety and Accountability Act, was signed into law by Gov. Jared Polis on June 2. The law requires more frequent driver screening, faster reviews of serious complaints, measures targeting imposter and shared driver accounts, expanded safety reporting and greater cooperation with law enforcement.

Several requirements will be phased in over the next two years, but the law itself takes effect tomorrow.

For sexual assault survivors, the significance extends beyond passenger safety. Some of the new requirements could also help establish a clearer record of what a rideshare company knew about a driver, when it received a complaint and what action it took afterward.

Rideshare Companies Must Begin Reviewing Serious Complaints Within Seven Business Days

Among the law’s most significant provisions is a requirement that transportation network companies establish policies for reviewing whether a driver should be suspended or removed.

When Uber, Lyft or another covered company receives certain serious allegations against a driver or is contacted about those allegations by law enforcement, prosecutors or state regulators, the company must initiate its review within seven business days.

The law also requires meaningful human review when a driver is permanently deactivated rather than leaving the decision entirely to an automated system.

That response time could have particular importance when a passenger reports sexual assault or other dangerous conduct.

If a driver accused of serious misconduct remains active on a platform for weeks or months after a complaint, subsequent passengers may potentially be exposed to the same risk. A defined review requirement creates a clearer expectation for how quickly companies must act after receiving safety information.

New Law Targets Imposter Drivers and Shared Accounts

Colorado’s law also requires rideshare companies to develop policies intended to prevent imposter drivers, account sharing and account renting.

The issue became especially prominent after Colorado Rep. Jenny Willford publicly disclosed that she had been sexually assaulted following a Lyft ride in 2024.

Willford said the person driving the vehicle was not the individual identified as the authorized driver in the Lyft app. She subsequently sued Lyft and the transportation company whose account the driver allegedly used.

Willford later became one of the prime sponsors of H.B. 1424, along with Rep. Meg Froelich and Sens. Lisa Cutter and Katie Wallace. The Colorado Legislature identifies all four as the measure’s prime sponsors.

Preventing unauthorized drivers from accessing rideshare accounts is more than an identity-verification issue. If the person behind the wheel has not gone through the platform’s actual screening process, a passenger may have no meaningful way to know who is transporting them.

Driver Background Checks Will Be Required Every Six Months

The new law also strengthens driver screening.

Rideshare companies must obtain privately administered criminal background checks at least once every six months after a driver’s initial screening. Certain companies conducting at least 20,000 monthly rides must pay for required initial criminal-history checks.

An additional background check can also be triggered when a complaint involving specified allegations is filed against a driver.

Supporters argue that repeated screening can identify criminal conduct that occurs after someone initially becomes a rideshare driver.

That distinction is important because a background check performed when someone first joins Uber or Lyft cannot identify an arrest, conviction or other disqualifying event that occurs years later.

Why These Rules Could Matter in a Rideshare Sexual Assault Lawsuit

For a survivor pursuing a civil lawsuit, the central legal issue may extend beyond whether a driver committed an assault.

Claims against rideshare companies can involve questions about corporate conduct, including:

• whether the company received previous complaints about the same driver;
• how quickly the company investigated those reports;
• whether the driver was allowed to continue accepting passengers;
• whether identity-verification procedures were adequate;
• what background-screening information was available;
• whether safety policies were actually enforced; and
• whether company records contradict representations made about passenger safety.

Colorado’s new law creates more specific obligations surrounding several of those issues.

That does not mean that every violation automatically makes Uber or Lyft liable for an assault. Liability still depends on the allegations, evidence and legal claims in an individual case.

But more formalized complaint procedures and recordkeeping can potentially make it easier to reconstruct what happened before and after a safety report.

Companies Must Respond Quickly to Certain Evidence Requests

Another provision could have particular relevance after an alleged assault.

When a complaint has been filed, a rideshare company generally must respond to a qualifying subpoena or search warrant seeking related information from a court, prosecutor, law enforcement agency, the Colorado Public Utilities Commission or the attorney general within 72 hours, unless a different deadline is agreed upon.

Digital rideshare records can contain information that may be difficult for an individual passenger to obtain independently.

Depending on the circumstances, records may show:

• the driver’s identity and account history;
• trip times and locations;
• GPS information;
• communications through the app;
• complaints made about a driver;
• previous deactivation or suspension activity; and
• actions the company took after receiving a report.

For survivors, preserving their own records can also be important. Trip receipts, screenshots, messages, driver information and correspondence with Uber or Lyft should generally not be deleted if legal action is being considered.

Colorado Will Require More Public Safety Reporting

The Act also establishes broader reporting requirements.

Beginning by February 1, 2027, and annually thereafter, rideshare companies must submit specified safety and discrimination data to the Colorado Public Utilities Commission, the attorney general and members of the General Assembly.

The reporting is expected to cover categories including assaults, stalking, harassment and other safety incidents. Colorado lawmakers promoting the legislation said increased reporting is intended to provide greater transparency about incidents occurring on rideshare platforms.

For survivors, aggregate reporting matters because individual incidents can otherwise appear isolated.

Patterns involving repeated complaints, particular safety failures or gaps in company procedures may become more visible when companies are required to report incidents consistently.

Audio and Video Recording Rules Are Still Coming

Another portion of the law looks further ahead.

The Colorado Public Utilities Commission must adopt rules by June 1, 2028 governing systems that allow drivers and passengers to opt into audio or video recording of rides. Those rules must address issues including access, ownership, storage and notice.

Those details will be determined through the state’s rulemaking process rather than being fully dictated by H.B. 1424 itself.

Colorado Law Also Protects Driver and Rider Ratings

The law prohibits rideshare companies from simply altering a rating that a rider gave a driver or that a driver gave a passenger. It also prohibits automatically assigning a rating that the user did not actually provide, although companies may remove reviews believed to result from fraud or bias.

That provision could have significance beyond customer satisfaction.

Driver ratings and complaints can potentially help document a history of concerning interactions. Preserving accurate information may therefore become important when evaluating whether warning signs existed before a more serious incident occurred.

Sexual Assault Survivors May Have Civil Claims Against More Than the Driver

Colorado’s new safety law should not be confused with the laws governing whether a survivor can recover compensation after an assault.

A survivor may potentially have claims against the individual accused of committing the assault and, depending on the circumstances, claims against a rideshare company or another responsible entity.

Those claims may involve legal theories such as negligent screening, inadequate safety procedures, failure to respond appropriately to earlier warning signs or other forms of corporate responsibility.

Thousands of sexual assault cases against Uber have already been coordinated in federal multidistrict litigation, where plaintiffs have challenged the company’s safety practices and alleged that Uber failed to adequately protect passengers.

Colorado’s new regulatory requirements could become particularly relevant to future incidents because companies will now operate under more specific state-mandated safety procedures.

Uber Sexual Assault MDL Puts Company Safety Practices Under National Scrutiny

Colorado’s new law also arrives while Uber is defending thousands of passenger sexual assault lawsuits consolidated in federal multidistrict litigation, known as MDL No. 3084, In re: Uber Technologies, Inc., Passenger Sexual Assault Litigation. The U.S. Judicial Panel on Multidistrict Litigation created the MDL in 2023 to coordinate lawsuits alleging, among other claims, that Uber knew about the risk of sexual assaults by drivers but failed to adopt adequate safety measures.

The litigation has grown substantially. As of June 1, 2026, the federal MDL included 3,571 pending actions, according to official federal court statistics. The lawsuits remain individual claims rather than a single class action, but they share common questions concerning Uber’s screening, safety practices, warnings and responses to reports of sexual misconduct. Those are many of the same areas Colorado lawmakers are now regulating more directly through recurring background checks, faster complaint reviews and stronger identity-verification requirements.

The first two federal bellwether trials have also produced notable results for survivors. In February 2026, an Arizona jury awarded a plaintiff $8.5 million in compensatory damages after finding that the driver who assaulted her was acting as Uber’s agent, making the company legally responsible for his conduct; however, the jury rejected plaintiff’s negligence claim and did not award punitive damages. In the second bellwether, tried in North Carolina in April 2026, another jury again found Uber liable, but awarded only $5,000 in emotional-distress damages. The sharply different awards underscore why bellwether trials matter: they test liability theories and provide both sides with information about how juries may value different factual scenarios, potentially influencing settlement negotiations across the broader MDL.

Colorado Has Expanded Civil Filing Rights for Sexual Misconduct Claims

Colorado has also substantially changed its statute of limitations for sexual misconduct lawsuits.

Under legislation that took effect January 1, 2022, qualifying civil actions involving sexual misconduct can generally be commenced without a limitations period when the cause of action accrued on or after January 1, 2022. The law can also apply to some earlier claims that had not already expired as of January 1, 2022.

Importantly, the statute can apply not only to claims against the person accused of sexual misconduct but also to certain claims arising from the same circumstances against another person or entity.

That can be particularly relevant in rideshare cases where a survivor is considering potential claims against both a driver and a corporation.

Older cases can be more complicated because the law did not necessarily revive every claim that had already expired before the 2022 changes.

For that reason, someone should not assume either that a claim is barred because time has passed or that Colorado’s elimination of certain filing deadlines automatically makes every historical claim actionable.

Proposed Federal Legislation Could Create a New Liability Fight

Colorado’s law is taking effect while rideshare regulation is also being debated in Washington.

A proposed amendment involving transportation network companies was filed during consideration of H.R. 8870, the BUILD America 250 Act, a major federal surface transportation bill. The House Transportation and Infrastructure Committee approved H.R. 8870 in May by a 62-2 vote, although the measure still must proceed through the federal legislative process before becoming law.

Colorado lawmakers including Willford have raised concerns that federal restrictions on rideshare liability could conflict with efforts by states to strengthen passenger protections.

That issue remains unresolved. As of August 2026, H.R. 8870 is proposed federal legislation, not a federal law overriding Colorado’s new protections.

What the New Colorado Law Means for Survivors

Perhaps the most important survivor-focused feature of H.B. 1424 is that it establishes specific actions companies are expected to take after receiving safety information.

For someone assaulted during a rideshare trip after the law takes effect, questions may include:

Was a previous complaint filed against the driver? How quickly was it reviewed? Was another background check conducted? Was the driver’s identity properly verified? Was the company already aware of concerning information? Did it preserve and provide relevant records?

Those questions can potentially become important when determining whether an assault was an unforeseeable act by one person or whether the evidence points to broader failures in a company’s safety systems.

The law may help prevent some incidents. But for survivors who have already been harmed, its transparency, documentation and complaint-response requirements could ultimately prove just as important.

Survivors considering a civil claim do not need to wait for Colorado’s later regulations or reporting requirements to take effect before seeking information about their existing legal options.