Free scan
Colorado — CPA

Colorado Privacy Act and website tracking

Colorado's comprehensive law requires honoring universal opt-out signals for targeted advertising and data sales.

Comprehensive consumer-privacy law
Statute type
AG-enforced
Who enforces

The Colorado Privacy Act (CPA) took effect July 1, 2023. It grants consumers rights to access, correct, delete, and opt out of the sale of personal data and of targeted advertising and profiling. Since mid-2024, covered businesses must honor a universal opt-out mechanism.

As with other comprehensive state laws, the practical website impact is that advertising pixels and tags sharing data for targeted advertising must respect opt-out choices, and privacy disclosures must be accurate.

Penalties & enforcement

Enforced by the Colorado Attorney General and district attorneys, with civil penalties. No general private right of action.

What this means for your site

Whatever the statute, the underlying test is practical: do third-party trackers collect or transmit visitor data before the visitor consents? RegSentry runs a real browser against your site and shows you exactly that — which scripts fire, when, and whether a consent banner actually held them back.

See what fires on your site before consent — free, 30 seconds, no signup.

Real browser scan, no signup to run it. You see a summary of the findings; the full report with every tracker unlocks with your email.

Related

California — CIPACalifornia — CCPA/CPRAPennsylvania — WESCAFlorida — FSCAWashington — My Health My Data Exposure calculator
Monitor my site ($99/mo) Get the 2026 checklist