The Colorado Privacy Act gives consumers more transparency into and control over the personal data that businesses collect about them. Under the CPA, Colorado residents have the rights to:
- Opt out from the sale of their personal data, or use of personal data for targeted advertising and certain types of profiling;
- Access the personal data a business collects about them;
- Correct inaccurate personal data a business collects and maintains about them;
- Delete personal data a business collects and maintains about them; and
- Download and remove personal data from a platform in a format that allows the transfer to another platform.
If a consumer submits a request to exercise a data right using the method specified by a company in the company’s privacy notice, the company must respond to the request within 45 days. If the company needs additional time, it may extend the 45-day period by 45 days, but must inform the consumer of the extension and reasons for the delay.
Companies covered by the CPA have several other obligations, as well. For instance, those companies are obligated to provide privacy notices describing the way that they collect and use personal data, obtain consent before collecting or using a consumer’s sensitive data, safeguard personal data, and obtain consent before using personal data for a purpose that was not disclosed at the time it was collected.
Click here to learn more about the CPA
Colorado’s data breach law requires entities to notify Colorado consumers when their personal information may have been compromised. In most instances, notification has to happen within 30 days of the entity determining a breach has occurred that may lead to misuse of Coloradans’ personal information. Also, the notice must provide certain information that could help consumers protect themselves against identity theft.
If you believe that a company has violated your rights or failed to fulfill an obligation under the CPA or data breach law, please file a complaint below.
Tips on Submitting a Complaint
The more information you can provide about the situation, the more useful your report will be. If possible, be prepared to provide the following information: