Applicability
Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.
What it requires
Applies to controllers conducting business in Colorado or targeting Colorado residents who process personal data of 100,000+ consumers, or 25,000+ consumers while deriving revenue or receiving a discount on the price of goods or services from the sale of personal data. Colorado sets no minimum-revenue threshold.
Legal text (excerpt)
This part 13 applies to a controller that conducts business in Colorado or produces or delivers commercial products or services that are intentionally targeted to residents of Colorado and that... (I) controls or processes the personal data of one hundred thousand or more consumers...; or (II) derives revenue or receives a discount on the price of goods or services from the sale of personal data and controls or processes the personal data of twenty-five thousand or more consumers.
Primary source
Colorado Attorney General: § 6-1-1304: Applicability ↗Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.