Colorado Privacy Act

On July 7, 2021, Governor Polis signed Senate Bill 21-190, also known as the Colorado Privacy Act (CPA). This legislation grants authority to the Colorado Attorney General to implement and enforce the CPA, which is a component of the State of Colorado’s Consumer Protection Act. The Attorney General is responsible for adopting new rules under the CPA, including those related to privacy regulations.

One key provision of the CPA is the requirement for the Attorney General to adopt rules outlining technical specifications for one or more universal opt-out mechanisms by July 1, 2023. These mechanisms are designed to clearly communicate a consumer’s choice to opt out of targeted advertising or the sale of personal data. The specific reference for this requirement is section 6-1-1313(2), C.R.S.

On October 10, 2022, the Secretary of State published the proposed draft rules for the CPA. Subsequently, the final rules were filed with the Secretary of State on March 15, 2023. The Colorado Register published these rules in March 2023, and they will come into effect on July 1, 2023.

Unlike other U.S. privacy laws, the CPA doesn’t exempt nonprofit organizations. However, this new rule only applies to churches that control the personal data of 25,000 consumers or more. We in the Office of the Bishop do not come close to that, but we feel it prudent to implement these policies and protections anyway. If you’d like to also do so, you may follow the instructions below.

You may use the terms and conditions content from the Episcopal Church in Colorado’s website and find and replace “The Episcopal Church in Colorado” and “Bishop and Diocese of Colorado” with the name of your church. Also find and replace “episcopalcolorado.org”with your own church’s URL. View the Episcopal Church in Colorado’s Terms & Conditions page: https://episcopalcolorado.org/terms-conditions/. For your privacy policy, you may also do the same as above based on the Episcopal Church in Colorado’s Privacy Policy page: https://episcopalcolorado.org/privacy-policy/.

These must be posted on your website and a mechanism for people to opt out of cookies or the terms & conditions must be implemented.

Please contat Mike@EpiscopalColorado.org for support if you are unable to do this on your own.