What is the CPA?

The Colorado Privacy Act (CPA) (opens in a new tab) is a comprehensive consumer privacy law that protects the data privacy of all Colorado residents. CPA will go into effect this summer on July 1, 2023, following the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection Act (VCDPA).

Your business can take steps to comply with Colorado’s privacy by following this guide.

Who is Subject to CPA?

CPA applies to businesses or “controllers“ that operate within Colorado or targets products and services to Colorado residents and either:

• Control or process the personal data of at least 100,000 consumers per year, or
• Control or process personal data of at least 25,000 consumers and generate revenue or receive discounts from selling personal data