Colorado Data Privacy: A Plain-Language Overview
Colorado Privacy Act (CPA)
Status: Fully effective as of July 1, 2023.
Colorado has a comprehensive consumer privacy law that regulates how businesses collect and use personal data. It grants residents the right to access, delete, and opt-out of the sale of their data and the use of automated profiling.
Rights residents generally have
- access to specific personal data
- delete personal data
- correct inaccurate personal data
- opt-out of data sales
- opt-out of targeted advertising
- opt-out of automated profiling
- data portability
Who it generally applies to
Applies to for-profit entities that conduct business in Colorado or produce products/services for residents, and either control/process data of 100,000+ consumers or derive revenue from sale of personal data and control/process data of 25,000+ consumers.
What this means for B2B outreach
The law generally applies to personal data of 'residents,' which is interpreted to mean individuals in a personal context; contact info used strictly for employment (B2B) or business-to-business communications is typically excluded.
Authoritative source: Colorado Department of Law / Attorney General. Always confirm current requirements there.
Marketing that respects privacy by design
We run permission-based, compliance-minded campaigns with real opt-out handling.
Talk to us