We monitor companies that send data breach notification letters to Colorado residents and report to the Colorado Attorney General. If you received a breach notice, you may qualify for compensation — at no cost to you.
Colorado Privacy Act (CPA) & HB 18-1128 Breach Notification
Colorado's breach notification law, strengthened in 2018 and updated with the Colorado Privacy Act, requires notification within 30 days and mandates companies implement and maintain reasonable security procedures. Colorado was among the first states to create affirmative security obligations — not just notification requirements.
Colorado residents have strong rights under both the breach notification law and the Colorado Privacy Act. Companies have a legal duty to protect your data, and failure to do so is actionable.
No notification letters on file for Colorado yet. We update daily from the Colorado AG database.
Received a data breach notification letter from a company in Colorado? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →