Colorado Privacy Act (CPA) applies to personal data that is either controlled or processed as defined to include not only data collection but also storage. Personal data is defined as information that is linked or reasonably linked to an identifiable individual. The 2023 CPA does not exclude nonprofits. The 2023 CPA allows Colorado residents to opt out of targeted advertising and sales.
For any further questions please refer to the Colorado Privacy Act SB21-190 per the Colorado General Assembly