Data Privacy | Data Breach - Colorado Attorney General

Data Privacy

The Colorado Privacy Act gives consumers more transparency into and control over the personal data that businesses collect about them. Under the CPA, Colorado residents have the rights to:

Opt out from the sale of their personal data, or use of personal data for targeted advertising and certain types of profiling;
Access the personal data a business collects about them;
Correct inaccurate personal data a business collects and maintains about them;
Delete personal data a business collects and maintains about them; and

Download and remove personal data from a platform in a format that allows the transfer to another platform.

If a consumer submits a request to exercise a data right using the method specified by a company in the company’s privacy notice, the company must respond to the request within 45 days. If the company needs additional time, it may extend the 45-day period by 45 days, but must inform the consumer of the extension and reasons for the delay.

Companies covered by the CPA have several other obligations, as well. For instance, those companies are obligated to provide privacy notices describing the way that they collect and use personal data, obtain consent before collecting or using a consumer’s sensitive data, safeguard personal data, and obtain consent before using personal data for a purpose that was not disclosed at the time it was collected.

Click here to learn more about the CPA

Data Breaches

Colorado’s data breach law requires entities to notify Colorado consumers when their personal information may have been compromised. In most instances, notification has to happen within 30 days of the entity determining a breach has occurred that may lead to misuse of Coloradans’ personal information. Also, the notice must provide certain information that could help consumers protect themselves against identity theft.

If you believe that a company has violated your rights or failed to fulfill an obligation under the CPA or data breach law, please file a complaint below.

Tips on Submitting a Complaint

The more information you can provide about the situation, the more useful your report will be. If possible, be prepared to provide the following information:

What is your issue about?

Be clear and concise. Briefly describe your issue and what steps you have taken to resolve it. Be sure to include relevant dates and other details about your report, including, if possible, any CPA consumer right you feel may have been violated, or CPA obligation that was not fulfilled.

Information about the company or seller

If available, please be prepared to provide information on the business or individual you are reporting on, such as entity name, address, phone number, website, email address, and any other identifying information.

Your contact information

Please be prepared to provide your contact information, such as your name, address, phone number, and your email address.

Why file a complaint

Every complaint we receive gives us insights into problems that people are experiencing in Colorado and helps us identify trends and prioritize problems. Information from the public is vital in helping us document those trends and, when appropriate, pursue investigations and file lawsuits on behalf of the public.

Please note: The Attorney General’s Office does not have authority to provide legal advice or legal representation to individuals and does not have the authority to investigate or prosecute your individual case. 