Your Colorado consumer data rights
In effect
The Colorado Privacy Act gives Colorado residents rights over the personal data that covered businesses collect about them. It has been in effect since July 1, 2023.
- Who or what it protects
- Colorado residents acting as individuals or households, not as employees or job applicants. It covers businesses that do business in Colorado or target Colorado residents and that process the personal data of at least 100,000 Colorado consumers a year, or that earn revenue from selling personal data and process the data of at least 25,000 consumers.
- What you can do
- You can learn whether a business collects your personal data, see it, correct it, delete it, and get a copy you can take elsewhere. You can opt out of the sale of your data, targeted advertising and certain profiling. Since July 1, 2024, covered businesses must honor the Global Privacy Control, a browser setting or extension that opts you out of sales and targeted advertising on the sites you visit. Use the method in the company's privacy notice. It must respond within 45 days, which it can extend by 45 days, and your first request in a year is free. If it refuses, you can appeal; it must answer the appeal and tell you that you can contact the Attorney General.
- Limits and eligibility
- The Attorney General and district attorneys enforce the law; it gives you no right to sue. It does not apply to employee or job-applicant data, or to information made publicly available by government or by you.
- Who oversees it
- Colorado Attorney General
- The law
- Colorado Privacy Act
More official places to go
Checked against the official sources on October 6, 2026. Links last checked November 1, 2026.