§ 6-1-1304StatuteReference only

Applicability

Effective July 1, 2023Reviewed July 2026

Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.

What it requires

Applies to controllers conducting business in Colorado or targeting Colorado residents who process personal data of 100,000+ consumers, or 25,000+ consumers while deriving revenue from data sale.

Legal text (excerpt)

This part 13 applies to a controller that conducts business in Colorado or produces or delivers commercial products or services that are intentionally targeted to residents of Colorado and that... controls or processes personal data of one hundred thousand or more consumers...

Colorado Privacy Act: § 6-1-1304, Statute, effective 2023

Primary source

Colorado Attorney General: § 6-1-1304: Applicability

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit