PrivacyUnited States — Colorado
Colorado Privacy Act (CPA)
The Colorado Privacy Act (effective July 1, 2023) provides comprehensive consumer privacy rights for Colorado residents. It applies to controllers conducting business in Colorado or producing products/services targeted to Colorado residents that control or process personal data of 100,000+ consumers annually, or 25,000+ consumers while deriving revenue from sale of personal data.
Domains
Universal Opt-Out and Enforcement
Data Protection Assessments
Sensitive Data and Consent
Controller Obligations
Consumer Rights
Compare Colorado Privacy Act (CPA)
Colorado Privacy Act (CPA) vs ISO 27001:2022View comparison →Colorado Privacy Act (CPA) vs SOC 2View comparison →Colorado Privacy Act (CPA) vs NIST CSF 2.0View comparison →Colorado Privacy Act (CPA) vs GDPRView comparison →Colorado Privacy Act (CPA) vs HIPAAView comparison →Colorado Privacy Act (CPA) vs PCI DSS 4.0View comparison →
Colorado Privacy Act (CPA) by Industry
Colorado Privacy Act (CPA) for Healthcare→Colorado Privacy Act (CPA) for Financial Services→Colorado Privacy Act (CPA) for Technology→Colorado Privacy Act (CPA) for Government→Colorado Privacy Act (CPA) for Manufacturing→Colorado Privacy Act (CPA) for Energy→Colorado Privacy Act (CPA) for Retail→Colorado Privacy Act (CPA) for Education→
Colorado Privacy Act (CPA) by Role
Frequently Asked Questions
What is Colorado Privacy Act?
The Colorado Privacy Act (effective July 1, 2023) provides comprehensive consumer privacy rights for Colorado residents. It applies to controllers conducting business in Colorado or producing products/services targeted to Colorado residents that control or process personal data of 100,000+ consumers annually, or 25,000+ consumers while deriving revenue from sale of personal data.
How many controls does Colorado Privacy Act have?
Colorado Privacy Act contains 59 controls organized across 5 domains.
Where does Colorado Privacy Act apply?
Colorado Privacy Act is applicable in United States — Colorado. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Colorado Privacy Act map to?
Colorado Privacy Act has control-to-control mappings with 437 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Colorado Privacy Act compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
How ready are you for Colorado Privacy Act (CPA)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.