Colorado
Colo. Rev. Stat. § 6-1-1301 et seq. (CPA)
Applicability
- Consent model: opt_out
- Consumer threshold: 100,000
- Revenue threshold: none stated
Enforcement
- Regulator: Attorney General, District Attorneys
- DSAR response window: 45 days
- Cure period: Sunset (expired 2025-01-01)
Global Privacy Control (GPC)
Mandatory to honor as of 2024-07-01.
Recommended CMP for Colorado Compliance
Automate opt-out banners, GPC signals, and regional compliance.
Deploy Colorado Compliant Banner →Affiliate disclosure: this is an affiliate link — we may earn a commission at no cost to you.
The information provided is for educational and comparison purposes only and does not constitute formal legal advice.
Sourced from a secondary legal tracker (not yet independently verified against primary statute text), captured 2026-09-11. Source: https://www.consenteo.com/knowledge-hub/legal/us_state_privacy_law_tracker_2026.