DATA PROTECTION POLICY (DPP)

ORDER FORM

Price

Custom quote provided after Order Form submission.

How to Order

Complete the Order Form and send by email. We will then follow up with your price quote and payment instructions.

Overview

Colorado law (HB 18-1128) requires businesses that handle Personal Identifying Information (PII) to take proactive steps to protect consumer data. The law applies to all businesses that collect, store, or dispose of PII of Colorado residents—regardless of size or industry. Real estate professionals must adopt written policies per Colorado Real Estate Commission (CREC) Position Statement 13 to remain compliant.

What the DPP Covers

Our attorneys can help your business meet the legal requirements with a customized DPP that outlines how to:

• Minimize the collection and retention of PII.
• Safeguard stored PII with reasonable security measures.
• Dispose of obsolete PII properly.
• Investigate and notify affected parties in the event of a data breach.

Our process ensures a practical and legally sound policy tailored to your operations.

Important Note on Colorado Privacy Act (CPA) Compliance

Our standard DPP aligns with Colorado Real Estate Commission requirements and key statutes (C.R.S. §§ 6-1-713 & 713.5). However, it may not fully satisfy the more extensive obligations under the CPA for data-intensive businesses like credit card companies. If your business has complex data operations, we recommend consulting a privacy law specialist for full CPA compliance.

DATA PROTECTION POLICY ORDER FORM