§ 6-1-1311StatuteReference only

Enforcement and Penalties

Effective July 1, 2023Reviewed July 2026

Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.

What it requires

Grants the Colorado Attorney General and district attorneys exclusive authority to enforce the Act; there is no private right of action. Violations are deceptive trade practices under the Colorado Consumer Protection Act, carrying civil penalties of up to $20,000 per violation. The 60-day right to cure sunset on January 1, 2025, so the Attorney General may now seek penalties without first affording an opportunity to cure.

Legal text (excerpt)

The attorney general and district attorneys have exclusive authority to enforce this part 13... No private right of action is created... [The 60-day notice and opportunity to cure under prior subsection (1)(d) was repealed effective January 1, 2025.]

Colorado Privacy Act: § 6-1-1311, Statute, effective 2023

Primary source

Colorado Attorney General: § 6-1-1311: Enforcement and Penalties

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit