What you collect. Do you know every type of personal information your website, app, or service collects and stores?
Learn more ›Colorado Data Privacy Law and Compliance
GDPR, CCPA, and Colorado Privacy Act compliance for online businesses, from experienced privacy attorneys.
Data privacy law is a growing and important area of compliance for online businesses that collect consumer and personal information. Names, email addresses, IP addresses, physical addresses, location data, IMEIs, and other personal information are stored online constantly, and all of it is subject to state, federal, and foreign data privacy laws.
The privacy laws that may apply to you.
GDPR
European Union
General Data Protection Regulation. One of the strictest privacy laws an online business may need to consider, with significant fines for violators. Learn more ›
CCPA
California
California Consumer Privacy Act. Does for California what the GDPR does for the EU, setting rules for how companies manage and protect consumers’ personal information. Learn more ›
CPA
Colorado
Colorado Privacy Act. Gives Colorado residents rights over their personal data, with enforcement against businesses that violate them. Learn more ›
Questions every online business should ask.Before a regulator asks them for you.
Third parties. Which third parties are you sharing your clients’ personal information with, and does your privacy policy disclose it?
Learn more ›Compliance. Are you protecting and maintaining personal information in compliance with the GDPR, the CCPA, and the Colorado Privacy Act?
Learn more ›Data breaches. What obligations do you have to your customers if personal information is stolen in a breach?
Learn more ›Your privacy policy. Does your business actually follow the disclosures in its own privacy policy?
Privacy policies ›Regulators. Could your practices draw attention from the European Union, the Federal Trade Commission, or a state attorney general?
Learn more ›Privacy law, explained.What each law asks of your business.
General Data Protection Regulation (GDPR).
Privacy rules for the European Union.
The GDPR was designed to harmonize data privacy laws across the European Union and give internet users greater privacy rights. It also created a framework for how businesses and other organizations manage their customers’ personal information.
Companies found in breach of the rules face significant fines and reputational damage.
California Consumer Privacy Act (CCPA).
California’s answer to the GDPR.
The CCPA does for California what the GDPR does for the EU. The rules differ slightly, but the idea is the same: the law sets out how companies must manage and protect consumers’ personal information.
It strengthens the protections consumers have when a breach of personal data occurs and places a duty on companies and organizations to take the protection of personal data seriously.
Colorado Privacy Act (CPA).
Privacy rights for Colorado residents.
The Colorado state legislature passed the Colorado Privacy Act in 2021, and it took effect on July 1, 2023. Focused on consumers, the law gives Colorado residents rights over their personal data and is enforced by the Colorado Attorney General and district attorneys against businesses that violate it.
Our Denver-area privacy attorneys can advise you on the Colorado-specific consumer privacy law, as well as privacy law generally, including the GDPR, one of the strictest laws online businesses may need to consider.
Liability and enforcement.
Compliance costs less than a violation.
Data privacy breaches can result in heavy fines or civil lawsuits. Maintaining compliance with the various data privacy laws, and following the disclosures in your own privacy policy, helps you avoid unwanted attention from regulators such as the European Union, the Federal Trade Commission, and the Colorado or other state attorney general offices.
Make sure you retain experienced privacy law attorneys who can help you navigate the laws and regulations that apply to your online business.
Have a legal question?
Talk with an experienced data privacy attorney about your website, app, or online business.
Schedule a consultationTerms and privacy policies ›Privacy Law FAQ
Does my website need a privacy policy?
It depends. What kind of information do you collect from your users? Are you running an e-commerce website? If so, you probably need a privacy policy to comply with privacy laws such as California’s CCPA and the EU’s GDPR.
Can I share personal information with third parties?
Possibly. Who are your users, and are you telling them with whom you share or sell their personal information? It is important to be transparent about who receives any personal information your website collects.
Does my US-based online business need to comply with the GDPR?
Does your online business collect and maintain personal information from people in the European Union? If so, you may need to make sure their information is managed in compliance with the EU regulation. The law applies broadly, and fines for non-compliance are substantial. Established privacy policies and personal information management practices are important for proper compliance.