Colorado CPA compliance with ConsentX
Colorado Privacy Act
Colorado, USA
In force since 2023
United States
Who it applies to
Controllers that process data of 100,000+ Colorado consumers, or 25,000+ while deriving revenue from selling data.
Penalties
Enforced by the Colorado AG and district attorneys, with penalties under the state's consumer protection statute.
Key obligations
- Honor a universal opt-out mechanism
- Offer opt-out of targeted ads, sale and profiling
- Opt-in consent for sensitive data
- Clear privacy notice
- Consumer rights handling
How ConsentX helps
Universal opt-out mechanism support
Targeted-ads and sale opt-out
Sensitive-data opt-in gating
DSAR workflow
Get Colorado CPA ready with ConsentX
Start free, or book a walkthrough with our team.
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.
Frequently asked questions
Does Colorado require a universal opt-out mechanism?+
Yes. Controllers must recognize a universal opt-out signal such as Global Privacy Control.
Is consent needed for sensitive data in Colorado?+
Yes, processing sensitive data requires opt-in consent under the Colorado Privacy Act.