Colorado Privacy Act

Colorado's comprehensive consumer privacy law gives residents rights to opt out of targeted advertising, sale, and significant-decision profiling, and to access, correct, delete, and port their personal data, with an appeal process. Controllers must give a privacy notice, minimize and secure data, get opt-in consent for sensitive data, honor universal opt-out signals, and run data protection assessments. Amendments added biological and neural data (2024), biometric rules (2025), minors' online protections (2025), and precise geolocation as sensitive data with consent required to sell sensitive data (2025).