How many controls does Colorado Privacy Act have?

Colorado Privacy Act contains 59 controls organized across 5 domains.

Where does Colorado Privacy Act apply?

Colorado Privacy Act is applicable in United States — Colorado. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.

What frameworks does Colorado Privacy Act map to?

Colorado Privacy Act has control-to-control mappings with 437 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.

How do I get started with Colorado Privacy Act compliance?

Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.

Colorado Privacy Act (CPA)

The Colorado Privacy Act (effective July 1, 2023) provides comprehensive consumer privacy rights for Colorado residents. It applies to controllers conducting business in Colorado or producing products/services targeted to Colorado residents that control or process personal data of 100,000+ consumers annually, or 25,000+ consumers while deriving revenue from sale of personal data.

Domains

Universal Opt-Out and Enforcement

Data Protection Assessments

Sensitive Data and Consent

Controller Obligations

Consumer Rights

Frequently Asked Questions

Map Colorado Privacy Act (CPA) to any other framework

Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.

Try Free on Compliance Platform