Colorado Privacy Act (CPA) Awareness Course

Coming Soon: March 2026 Delivery: 100% online Duration: 35-40 minutes Certificate on Completion

0:00

15,000+ learners across our course collection. Immediate access on launch. 14 day 100% money-back guarantee.

Colorado's Privacy Act is considered one of America's strongest state privacy laws. With unique requirements like mandatory universal opt-out recognition, broader sensitive data categories, and required data protection assessments, the CPA sets a high bar for privacy compliance.

This course gives your team practical guidance on the Colorado Privacy Act. We cover who the law applies to, what rights Colorado residents have, the universal opt-out mechanism, data protection assessment requirements, and what happens when things go wrong.

The CPA's 60-day cure period expires in January 2025, making compliance more urgent than ever. No technical background required - just focused, practical training your team can apply immediately.

Why learn about the CPA?

Understand one of America's strongest state privacy laws
Comply with mandatory universal opt-out mechanism requirements
Conduct required data protection assessments correctly
Avoid penalties of up to $20,000 per violation ($50,000 for older adults)
Prepare for enforcement without cure period from January 2025

Course features

Colorado-specific

Focused entirely on the CPA with Colorado-specific requirements, thresholds, and enforcement context.

Practical scenarios

Real-world examples and case studies showing how the CPA applies in everyday business situations.

2025 updates included

Covers the end of the cure period and latest regulatory guidance from the Colorado Attorney General.

Official sources

Built from Colorado statutes and Attorney General rules, with references to official documentation.

Learning with us

Course information

Learning outcomes

Understand when and how the CPA applies to your organisation
Know the rights Colorado residents have over their personal data
Implement universal opt-out mechanisms correctly
Conduct data protection assessments for high-risk processing
Understand enforcement and potential penalties

Training recommendations

All employees who handle customer data should complete this training.
Annual refresher training is recommended to stay current with regulatory guidance and enforcement trends.
Teams conducting data protection assessments may benefit from additional role-specific training.

This course is recommended for

Employees who handle customer data at organisations that conduct business in Colorado or target Colorado residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).

Course content

Section 1: Understanding Colorado's Privacy Framework

In this section we introduce the Colorado Privacy Act and explain why it's considered one of America's strongest state privacy laws. We cover when the law applies, who it protects, and the key definitions you need to understand.

Lessons

Introduction to the CPA
Who the law applies to
Key definitions explained
Colorado residents and their rights

Section 2: Consumer Rights Under the CPA

Colorado residents have comprehensive rights over their personal data. In this section we cover what those rights are, including the unique universal opt-out mechanism, and your obligations when you receive a request.

Lessons

The right to know and access
The right to correct and delete
The right to data portability
The right to opt out of targeted advertising
Universal opt-out mechanisms
Handling consumer requests

Section 3: Sensitive Data and Consent Requirements

The CPA requires opt-in consent before processing sensitive data - with broader categories than many other states. We explain what counts as sensitive data and how to handle consent correctly.

Lessons

What is sensitive data under CPA?
The opt-in consent requirement
Children's data protections
Biometric and geolocation data
Practical consent workflows

Section 4: Data Protection Assessments

Colorado requires data protection assessments for certain high-risk processing activities. This section covers when assessments are required and how to conduct them properly.

Lessons

When assessments are required
Assessment components and process
Targeted advertising assessments
Profiling assessments
Documentation requirements

Section 5: Operational Requirements

This section covers the day-to-day operational requirements including data minimisation, purpose limitation, security obligations, and working with processors.

Lessons

Data minimisation principles
Purpose limitation
Security requirements
Processor contracts and obligations
Privacy notice requirements

Section 6: Enforcement and Compliance

Understand the enforcement landscape, the cure period that ends in 2025, and what penalties look like. We also cover how to respond if you receive an investigation notice.

Lessons

Attorney General enforcement
The 60-day cure period (ending January 2025)
Penalties and remedies
No private right of action
Responding to investigations

Section 7: Assessment

Test your knowledge with scenario-based questions covering all the key CPA concepts from the course.

Lessons

Knowledge check (10 questions)

How it works

Step 1

Get notified

Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As the CPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and regulatory guidance.

What's included

Training

Distraction-free online learning platform
Scenario-based end of course assessment

Updates

Access to all course material updates and enhancements for the length of your access period

Certification

Certificate on completion

Course FAQs

Will I get a certificate?

Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.

Who should take this course?

This course is designed for employees who handle customer data at organisations that may be subject to Colorado's privacy law. This includes marketing, sales, customer service, HR, and IT teams.

How is the CPA different from other US state privacy laws?

The Colorado Privacy Act is considered one of the strongest US state privacy laws. Key differences include: mandatory universal opt-out mechanism recognition, broader sensitive data categories including citizenship/immigration status, required data protection assessments for high-risk processing, and the cure period expires in January 2025.

Does the CPA apply to my organisation?

The CPA applies to organisations that conduct business in Colorado or target Colorado residents, AND either: (a) control or process personal data of 100,000+ Colorado consumers per year, or (b) control or process data of 25,000+ Colorado consumers and derive revenue from selling personal data.

What are the penalties for non-compliance?

The Colorado Attorney General can impose civil penalties of up to $20,000 per violation (up to $50,000 for violations involving older adults). The 60-day cure period ends in January 2025, after which enforcement can proceed without a cure opportunity.

Is there a money back guarantee?

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

How long does the course take?

The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.