Colorado Privacy Act (Minors Amendments)
Colorado Privacy Act (Minors Amendments) in Colorado: active, effective October 1, 2025. Applies to Controllers conducting business in Colorado offering online services to minors. Age range: 13-17. Duty of reasonable care to avoid heightened risk of harm
Key facts
| Jurisdiction | Colorado |
|---|---|
| Category | Consumer Privacy |
| Status | active |
| Effective date | October 1, 2025 |
| Age range | 13-17 |
| Applies to | Controllers conducting business in Colorado offering online services to minors |
Key requirements
- Duty of reasonable care to avoid heightened risk of harm
- Consent required before selling/sharing minor data
- Prohibits design features to extend use
- Data protection impact assessments
Frequently asked
What does Colorado Privacy Act (Minors Amendments) require?
Duty of reasonable care to avoid heightened risk of harm Consent required before selling/sharing minor data Prohibits design features to extend use Data protection impact assessments
Who must comply with Colorado Privacy Act (Minors Amendments) in Colorado?
Controllers conducting business in Colorado offering online services to minors
When does Colorado Privacy Act (Minors Amendments) take effect and what is its status?
Effective October 1, 2025. Current status: active.
Related laws
| Law | Jurisdiction | Category | Status | Effective |
|---|---|---|---|---|
| Arkansas Children and Teens' Online Privacy Protection Act (HB 1717) | Arkansas | Consumer Privacy | active | July 1, 2026 |
| California Consumer Privacy Act (CCPA) | California | Consumer Privacy | active | September 2025 |
| California Mental Health Warnings (AB 56) | California | Consumer Privacy | pending | January 1, 2027 |
| Connecticut Data Privacy Act (Children's Privacy Amendments) | Connecticut | Consumer Privacy | active | October 1, 2025; Phase 2 July 1, 2026 |
| Delaware Personal Data Privacy Act | Delaware | Consumer Privacy | active | January 1, 2025 |
| Indiana Consumer Data Protection Act | Indiana | Consumer Privacy | active | January 1, 2026 |
| Iowa Consumer Data Protection Act | Iowa | Consumer Privacy | active | January 1, 2025 |
| Kentucky Consumer Data Protection Act | Kentucky | Consumer Privacy | active | January 1, 2026 |
Put it into practice
- Generate the policy: Colorado AI Act policy generator (generatepolicy.com)
- Buy the policy pack: AI Risk Assessment Template (cyberpolicy.shop)
- Build it yourself: AI Risk Register Pack (ciso.diy)