Colorado Consumer Protection Act

Colorado HB 06-1119 of 2006 requires that an individual or commercial entity that conducts business in Colorado and that owns or licenses computerized data that includes personal information about a resident of Colorado shall, when it becomes

aware of a breach of the security of the system, conduct in good faith a prompt investigation to determine the likelihood that personal information has been or will be misused. The individual or the commercial entity shall give notice as soon as possible to the affected Colorado residents unless the investigation determines that the misuse of information about a Colorado resident has not occurred and is not reasonably likely to occur. The policy detects combinations of Personally Identifiable Information (PII) like social security, credit card, and driver’s license numbers. The rules for this policy are:

• Colorado Consumer Protection Act: SSN: with Colorado driver license
• Colorado Consumer Protection Act: SSN with CCN
• Colorado Consumer Protection Act: Name with SSN
• Colorado Consumer Protection Act: Name with Colorado driver license
• Colorado Consumer Protection Act: Name with CCN
• Colorado Consumer Protection Act: SSN with DNA profile