Colorado Privacy Act (CPA) Awareness Course
The Colorado Privacy Act establishes privacy rights and obligations for covered organisations. It includes universal opt-out recognition, sensitive data protections, and data protection assessments for certain processing.
This course gives your team practical guidance on the Colorado Privacy Act. We cover who the law applies to, what rights Colorado residents have, the universal opt-out mechanism, sensitive data, and what happens when things go wrong.
The CPA's general statutory cure period ended on January 1, 2025. The course explains enforcement and practical steps for responding to concerns. No technical background required - just focused, practical training your team can apply immediately.
Learning with us
Why learn about the CPA?
- Understand Colorado's privacy rights and obligations
- Understand universal opt-out choices and when to escalate
- Recognise when privacy review is needed
- Understand potential penalties and report concerns promptly
- Understand enforcement and the limits of cure periods
Course features
Colorado-specific
Focused entirely on the CPA with Colorado-specific requirements, thresholds, and enforcement context.
Practical scenarios
Practical scenarios showing how the CPA applies in everyday workplace situations.
2025 updates included
Covers the end of the general cure period and Colorado privacy requirements.
Official sources
Built from Colorado statutes and Attorney General rules, with references to official documentation.
Course information
Learning outcomes
- Understand when and how the CPA applies to your organisation
- Know the rights Colorado residents have over their personal data
- Recognise and route universal opt-out choices
- Identify situations requiring privacy review
- Understand enforcement and potential penalties
Training recommendations
- All employees who handle customer data should complete this training.
- Annual refresher training is recommended to stay current with regulatory guidance and enforcement trends.
- Teams conducting data protection assessments may benefit from additional role-specific training.
This course is recommended for
Employees who handle customer data at organisations that conduct business in Colorado or target Colorado residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform.
Course content
Start with the course introduction and legal notices.
Lessons
- Welcome and Legal Notices
Learn about the law, consumer requests, opt-outs, sensitive data and practical response.
Lessons
- What the CPA Means for Your Work
- What Customers Can Ask For
- Respecting Opt-Out Choices
- Sensitive Data Needs Extra Care
- Prevent Problems and Respond Promptly
Check your understanding with ten scenario-based questions.
Lessons
- Colorado Privacy Act: Final Assessment
How it works
Buy course seats
Purchase seats online, then start learning or invite your team members.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the CPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and regulatory guidance.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Complete the course and pass the final assessment to receive a digital certificate.
This course is designed for employees who handle customer data at organisations that may be subject to Colorado's privacy law. This includes marketing, sales, customer service, HR, and IT teams.
The CPA includes universal opt-out recognition, sensitive data protections and data protection assessments for certain processing. Its general statutory cure period ended in January 2025; a separate temporary provision applies to specified minors-related duties.
The CPA generally applies to controllers that conduct business in Colorado or target Colorado residents and either control or process the personal data of at least 100,000 consumers in a calendar year, or control or process data of at least 25,000 consumers and derive revenue or receive a discount on goods or services from selling personal data. Statutory exemptions apply.
The Colorado Attorney General and district attorneys can enforce the CPA and seek civil penalties and court orders. The general civil penalty can be up to $20,000 per violation. The general 60-day cure provision ended on January 1, 2025; a separate temporary provision applies to specified minors-related duties.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
Standalone course purchases include six months of access.
Allow approximately 29–34 minutes for teaching, practice and assessment, plus around four minutes for the welcome and legal notices. You can pause and resume at any time, and your progress is automatically saved.
Other courses
AI Literacy, Safety and Responsible Use Course
Included in PLUS
Texas Data Privacy and Security Act (TDPSA) Awareness Course
Included in PLUS
GDPR Refresher Training Course
Included in PLUS
Anti-Money Laundering Awareness Course
Included in PLUS
Virginia Consumer Data Protection Act (VCDPA) Awareness Course
Included in PLUS
CCPA California Course
Included in PLUS
Connecticut Data Privacy Act (CTDPA) Awareness Course
Included in PLUS
Swiss Federal Act on Data Protection (FADP) Course
Included in PLUS
