CPA

Colorado Privacy Act

In force Colorado privacy consumer rights

Virginia-style law with detailed Attorney General rules, including requirements to honor universal opt-out signals.

At a glance

Who it applies to: Businesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.
Who enforces it: Colorado Attorney General and district attorneys
When: In effect since 1 July 2023.

A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Dates and status checked against these sources on 27 September 2026. This page explains the law for practitioners; it is not legal advice.