In this support article, we’ll show you how to update your Termly privacy policy to comply with the data privacy law in Colorado, called the Colorado Privacy Act (CPA).

To read the law in full, you can check out the official legal text of the CPA.

Termly makes updates to the policy generators to reflect changes in data privacy laws that may impact our users. When an update occurs, we send Termly users an email with information about the changes. It is your responsibility to implement the appropriate updates as needed in your Termly Dashboard.

The Colorado Privacy Act (CPA) requirements are applicable to controllers who conduct their business in Colorado or sell products — or services — to residents of Colorado and meet one or more of the following thresholds:

If you want your policy to be compliant with the CPA, log into your Termly Dashboard and follow these steps in the generator.

Note: These steps are similar to the ones you would take to update your privacy policy to comply with Connecticut’s data privacy law, the CTDPA.

First, select Yes for the question, “Do you have users in the United States?”

See an example in the screenshot below.

Next, specify if you have disclosed or sold/shared personal information to third parties if you have not already done so.

See a sample of this question in the screenshot below.

Then select which US state privacy law you want your policy to cover, including the CPA.

See an example of this question in the screenshot below.

Now you should complete the questions in the US Considerations section if you have not already done so.

Next, provide an email address for appeals, in case your user wishes to appeal your business’s decision regarding a privacy request.

Note that this question is required to comply with several U.S. state data privacy laws, including the CPA, the CTDPA, and the VCDPA.

See an example of this question in the screenshot below.

Finally, click PUBLISH to update your policy.