Privacy Law Library

Spam Reduction Act of 2008 (commercial electronic mail)

Colorado Spam Reduction Act

Marketing

Colorado makes violations of the federal CAN-SPAM Act a state deceptive trade practice and separately bans falsified sender and routing information, unauthorized use of third-party domains, and emailing people who have opted out. Email service providers can sue for statutory damages.

Where
Colorado
Citation
C.R.S. 6-1-702.5
Status
In force
In force since
2008-08-05
Enforced by
Colorado Attorney General and district attorneys; email service providers
People can sue
Limited
Penalties
Deceptive trade practice (state civil penalties up to $20,000 per violation). Email service providers may recover actual damages, fees, and $1,000 statutory damages per unlawful message, capped at $10 million per defendant per occurrence (6-1-702.5(4)).
Applies to
  • Senders of commercial email in the course of business (6-1-702.5(2))

Practices it requires

  • Do not knowingly hide the point-of-origin email address, falsify routing information, or use a third party's domain without consent.C.R.S. 6-1-702.5(2)(b)-(d)
  • Honor do-not-email requests and do not pass opted-out addresses to others for commercial email without affirmative consent.C.R.S. 6-1-702.5(2)(e)

Other duties

  • Do not violate CAN-SPAM or its rules; doing so is a Colorado deceptive trade practice.C.R.S. 6-1-702.5(2)(a)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Research reference, not legal advice.