Colorado · Privacy Notice
Colorado Privacy Rights Request
Colorado's Privacy Act (CPA, C.R.S. Section 6-1-1301 et seq., effective July 1, 2023) grants Colorado residents rights to access, delete, correct, and opt out of personal data processing. Uniquely, Colorado requires businesses to honor universal opt-out mechanisms such as the Global Privacy Control (GPC) browser signal by July 1, 2024, meaning consumers don't even need to send individual opt-out requests if they have GPC enabled.
Colorado's Privacy Act (effective July 2023) includes a universal opt-out mechanism requirement, businesses must honor browser-level opt-out signals like the Global Privacy Control (GPC).
Governing law
C.R.S. Section 6-1-1301 et seq. (CPA)
Start Your Colorado Privacy Rights Request
Cites C.R.S. Section 6-1-1301 et seq. (CPA). Formatted for USPS Certified Mail. Instant PDF.
Start My Letter →Instant PDF download
Colorado Privacy Notice FAQs
What is the Global Privacy Control and does it work in Colorado?▾
The Global Privacy Control (GPC) is a browser-level signal that tells websites you opt out of the sale or targeted advertising use of your data. Colorado requires businesses to honor GPC signals under C.R.S. Section 6-1-1306(1)(a)(III) as of July 1, 2024. Enabling GPC in your browser (Firefox, Chrome with GPC extension, Brave) acts as an automatic opt-out for covered Colorado businesses.
What rights do I have under the Colorado Privacy Act?▾
Access, delete, correct, data portability, and opt out of targeted advertising / sale / profiling for significant decisions. Controllers must respond within 45 days (extendable 45 more). Colorado also has strong data minimization and security requirements for controllers.
Who enforces Colorado's privacy law?▾
The Colorado AG has exclusive enforcement authority. There is no private right of action. File complaints at coag.gov. The AG has been actively investigating companies that fail to provide opt-out mechanisms or respond to consumer requests.
kweldoc is a document drafting tool, not a law firm.