Colorado § 6-1-1307 - Processing de-identified data.
Full text of Colorado Colorado Revised Statutes § 6-1-1307 — Processing de-identified data., with citation guidance and answers to common questions.
§ 6-1-1307. Processing de-identified data.
(1) This part 13 does not require a controller or processor to do any of the following solely for purposes of complying with this part 13:
(a) Reidentify de-identified data;
(b) Comply with an authenticated consumer request to access, correct, delete, or provide personal data in a portable format pursuant to section 6-1-1306 (1), if all of the following are true:
(I) (A) The controller is not reasonably capable of associating the request with the personal data; or
(B) It would be unreasonably burdensome for the controller to associate the request with the personal data;
(II) The controller does not use the personal data to recognize or respond to the specific consumer who is the subject of the personal data or associate the personal data with other personal data about the same specific consumer; and
(III) The controller does not sell the personal data to any third party or otherwise voluntarily disclose the personal data to any third party, except as otherwise authorized by the consumer; or
(c) Maintain data in identifiable form or collect, obtain, retain, or access any data or technology in order to enable the controller to associate an authenticated consumer request with personal data.
(2) A controller that uses de-identified data shall exercise reasonable oversight to monitor compliance with any contractual commitments to which the de-identified data are subject and shall take appropriate steps to address any breaches of contractual commitments.
(3) The rights contained in section 6-1-1306 (1)(b) to (1)(e) do not apply to pseudonymous data if the controller can demonstrate that the information necessary to identify the consumer is kept separately and is subject to effective technical and organizational controls that prevent the controller from accessing the information.
Source: L. 2021: Entire part added, (SB 21-190), ch. 483, p. 3460, § 1, effective July 1, 2023.
Frequently Asked Questions About Colorado § 6-1-1307
What does Colorado Revised Statutes § 6-1-1307 cover?
Section 6-1-1307 ("Processing de-identified data.") is part of the Colorado Revised Statutes, the codified statutory law of Colorado. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Colorado § 6-1-1307?
A common citation format is "Colorado Revised Statutes § 6-1-1307" (Colorado). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Colorado law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Colorado official source linked on this page or consult a licensed Colorado attorney.
How does Colorado § 6-1-1307 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Colorado can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Colorado.