Confidentiality of social security numbers
Colorado SSN protection
Data security
Colorado limits how businesses display and transmit Social Security numbers. They may not publicly post SSNs, print them on access cards or on mailings (with exceptions for forms and applications), or require them to be sent over unsecured internet connections or used alone to log in.
- Where
- Colorado
- Citation
- C.R.S. 6-1-715
- Status
- In force
- In force since
- 2007-01-01
- Last amended
- 2010-08-11
- Enforced by
- Colorado Attorney General (Colorado Consumer Protection Act article)
- People can sue
- No
- Penalties
- The section sets no specific penalty.
- Applies to
- Any person or entity, except HIPAA-regulated entities and public records required to be open (6-1-715(1), (4))
Security duties
- Do not publicly post or display an individual's SSN or print it on cards needed to access products or services.C.R.S. 6-1-715(1)(a)-(b)
- Do not require an SSN to be sent over the internet unless the connection is secure or the number encrypted, or to access a website without a password or other authentication.C.R.S. 6-1-715(1)(c)-(d)
- Do not print SSNs on mailed materials unless required or permitted by law (applications and account forms excepted), and never visible on postcards or envelopes.C.R.S. 6-1-715(1)(e)
Sources
- Official text
- Colorado Revised Statutes 2024, Title 6 (Office of Legislative Legal Services, leg.colorado.gov)
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: The enforcement mechanism is not stated in 6-1-715; it is not listed in 6-1-105, so private-action and penalty availability are uncertain.
Research reference, not legal advice.