Compliance Radar · Children and teens
Colorado's minors' privacy duties take effect for businesses of any size
Colorado's minors' privacy rules apply to businesses of any size.
- Status
- In force; 60-day cure period until December 31, 2026
- Takes effect
- October 1, 2025
- Announced
- May 31, 2024 (SB 24-041 signed)
- Type
- law
What changed
Without consent (a parent's under 13), minors' data can't be used for targeted ads, sales or certain profiling. No age verification is required. GPC has been required since July 1, 2024.
Who it affects
Any controller whose online service reaches Colorado users it knows, or willfully disregards, are under 18.
What to do
- Find site areas used by people under 18.
- Turn off targeted ads and sales for known minors without consent.
- Document a minors' data protection assessment.
What ComplyMo already handles
Page audits and daily re-checks: Growth and up. Everything else: every plan, from $19 a month.
Sources
- Colorado General Assembly: SB 24-041 (opens in a new tab)
- Lowenstein Sandler: Colorado minors' data rules (opens in a new tab)
Summary of public sources, not legal advice.