Colorado (CPA)

Created by Maximiliano Sarmiento, Modified on Fri, 23 Jun 2023 at 06:17 PM by Maximiliano Sarmiento

What is the Colorado Privacy Act about?


In July 2021, Colorado adopted the Colorado Privacy Act (CPA), becoming the third state in the US to implement comprehensive privacy legislation, following California in 2018 and Virginia earlier in 2021.


The CPA is a privacy regulation specific to Colorado, safeguarding the rights of its residents and outlining the responsibilities of data controllers. It is set to go into effect on July 1, 2023.


Differing from the conventional opt-in approach, the Colorado Privacy Act operates on an opt-out basis, granting Colorado users the ability to decline the tracking, sale, and utilization of their personal data, particularly for targeted advertising and profiling purposes.


If your website is already compliant with California's CCPA, you'll be pleased to know that the opt-out button required by the CCPA aligns with the opt-out requirements of Colorado's CPA.


If you want to know more about the different regulations you can access our article "Laws and regulations for each region"




What type of cookie banner do I need to comply with this regulation?


  • Include a Button to Reject Cookies: Although it does not specifically clarify a button as in other cases, we must provide an opt-out option that “takes effect immediately and is consistent.”
  • Provide Detailed Information About Cookie Use: The cookie banner should contain information about why the website uses cookies. For example, does it collect data for analytics, advertising, or social media purposes?
  • Alert the User if the Website Shares Data with Third Parties: If the website shares the data collected through cookies with third parties the cookie banner should explain this.
  • Link to the Website’s Cookie Policy: Here the website will provide further information about the cookies in use on the site, including a list of all the cookies.
  • Include a Link to the Cookie Settings: This isn’t required under GDPR as long as users have the choice to reject all cookies. However, it does have the benefit of allowing users who would otherwise reject all cookies to permit some forms of data collection. 


Observations: With illow´s GLOBAL banner, your site will be ready to comply with this regulation.



If you want to know the different types of banner cookies that you can find on our platform, access our article "Types of banners you will find on our platform"

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select atleast one of the reasons

Feedback sent

We appreciate your effort and will try to fix the article