Colorado § 24-72-502 - Creation of a privacy policy for governmental entities.

Full text of Colorado Colorado Revised Statutes § 24-72-502 — Creation of a privacy policy for governmental entities., with citation guidance and answers to common questions.

§ 24-72-502. Creation of a privacy policy for governmental entities.

(1) Each governmental entity of the state shall create a privacy policy for the purpose of standardizing within such governmental entity the collection, storage, transfer, and use of personally identifiable information by such governmental entity. The policy of each governmental entity shall address, but shall not be limited to, the following:

(a) A general statement declaring support for the protection of individual privacy;

(b) A provision for the minimization of the collection of personally identifiable information to the least amount of information required to complete a particular transaction;

(c) Clear notice of the applicability of the "Colorado Open Records Act" pursuant to part 2 of this article;

(d) A method for feedback from the public on compliance with the privacy policy; and

(e) A statement that the policy extends to the collection of all personally identifiable information, regardless of the source or medium.

(2) (a) Any governmental entity that operates a world wide website as of August 7, 2002, shall establish and publish on its website a privacy policy pursuant to this part 5 no later than July 1, 2003.

(b) Any governmental entity that does not operate a world wide website as of August 7, 2002, and begins operation of a website before July 1, 2003, shall establish and publish on its website a privacy policy pursuant to this part 5 by July 1, 2003.

(c) In no event shall a governmental entity be permitted to operate a world wide website after July 1, 2003, without first establishing a privacy policy pursuant to this part 5. The privacy policy shall be published on such governmental entity's website as of the first day of operation of such website.

(3) Nothing in this section shall be construed to create a private cause of action based on alleged violations of this section.

Source: L. 2002: Entire part added, p. 774, § 1, effective August 7. L. 2009: (1)(c) amended, (SB 09-292), ch. 369, p. 1969, § 80, effective August 5.

PART 6

LIMITS ON GOVERNMENT ACCESS TO PERSONAL MEDICAL INFORMATION

Source: official Colorado text · Last verified 2026-08-27

Frequently Asked Questions About Colorado § 24-72-502

What does Colorado Revised Statutes § 24-72-502 cover?

Section 24-72-502 ("Creation of a privacy policy for governmental entities.") is part of the Colorado Revised Statutes, the codified statutory law of Colorado. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.

How do I cite Colorado § 24-72-502?

A common citation format is "Colorado Revised Statutes § 24-72-502" (Colorado). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.

Is this the official text of Colorado law?

No. This page is for research and education and may not include the most recent amendments. For official current law, check the Colorado official source linked on this page or consult a licensed Colorado attorney.

How does Colorado § 24-72-502 apply to my situation?

Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Colorado can advise on how this section applies to you. Contact your state or local bar association for a referral.

Sources & Verification

Not legal advice. Verify against the official source and consult a licensed attorney in Colorado.