Law note · Colorado
SB 24-041 (2024), Privacy Protections for Children's Online Data
cite Colo. Rev. Stat. ยงยง 6-1-1305.5, 6-1-1308.5, 6-1-1309.5 (amending the Colorado Privacy Act)
stage RECENT in force 11 months
effective 2025-10-01
reviewed 2026-07-15
Requires a controller offering an online service, product, or feature to a consumer it actually knows or willfully disregards is a minor (under 18) to use reasonable care to avoid a heightened risk of harm to minors and to conduct data protection assessments.
Without consent (the minor's, or a parent's for a child under 13), the controller may not process a minor's data for targeted advertising, sale, or significant profiling, use a system design feature to significantly increase, sustain, or extend the minor's use, or collect precise geolocation except as specified. Signed May 31, 2024.
Primary source: official signed act text, Colorado General Assembly