Yes. The Colorado Privacy Act took effect on July 1, 2023 and it gives Colorado residents rights over their personal data. The Attorney General and district attorneys enforce it1. Separately, Colorado’s breach law requires consumer notice, usually within 30 days2.