Colorado

Action

Laws

Current

Applies to a controller that conducts business in Colorado or produces or delivers commercial products or services intentionally targeted to Colorado residents and that

• controls or processes personal data of at least 100,000 Colorado residents during a calendar year; OR
• derives revenue or receives a discount on the price of goods or services from the sale of personal data and processes or controls personal data of at least 25,000 Colorado residents 

Colorado Privacy Act (CPA)
Date Active: 7/1/2023