Employer access to employees' personal online accounts

Colorado employers may not ask or require employees or applicants to disclose usernames or passwords for personal online accounts on personal devices, or to add the employer as a contact or change privacy settings, and may not retaliate for refusal. Limited exceptions cover securities and financial compliance investigations and investigations of unauthorized downloads of proprietary data.