We monitor data breaches reported to the Colorado Attorney General. If your information was exposed, you may qualify for compensation — at no cost to you.
Colorado Privacy Act (CPA) & HB 18-1128 Breach Notification
Colorado's breach notification law, strengthened in 2018 and updated with the Colorado Privacy Act, requires notification within 30 days and mandates companies implement and maintain reasonable security procedures. Colorado was among the first states to create affirmative security obligations — not just notification requirements.
Colorado residents have strong rights under both the breach notification law and the Colorado Privacy Act. Companies have a legal duty to protect your data, and failure to do so is actionable.
No active cases found for Colorado at this time. Check back — we update daily from the Colorado AG database.
Were you affected by a Colorado data breach? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →