Colorado Privacy

This Colorado Data Protection Assessment document memorializes your analysis of whether certain high-risk activities, such as selling personal information, are justified.

Controller

This is a Data Processing Agreement between your business and your vendor/service provider. It is intended to be included as an attachment to a Master Services Agreement

Processor

This is a Data Processing Agreement between your business and the company on whose behalf you act as a vendor/service provider. It is intended to be included as an attachment to a Master Services Agreement.

Controller

This document outlines how your company will handle personal information from consumers as a controller of personal information. This is meant to be an internal document, so it should be available to individuals within your company.

Processor

This document outlines how your company will handle personal information from consumers as a processor of personal information on behalf of a controller. This is meant to be an internal document, so it should be available to individuals within your company.

This document discloses specifics about how your company handles Coloradans’ personal data and what rights Colorado consumers have under the law. You must post the text of this document on your website. It may be included as part of your general privacy policy, or as a separate webpage linked from your general privacy policy. This notice takes into account requirements in Colorado which will not go into effect until July 1, 2023, so your organization may prefer to wait until that time to post the notice. We recommend waiting to post this notice until you have reviewed it thoroughly and are ready to comply with all of the representations this policy makes.