Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect debit card information from participants in Colorado? What are the requirements?

Based on the provided context documents, here are the requirements for collecting debit card information from participants in Colorado:

Requirements for Collecting Debit Card Information in Colorado

  1. The licensee must comply with federal and state laws and regulations regarding the collection and disclosure of nonpublic personal financial information [4.1].
  2. The licensee must obtain the participant’s consent or direction before disclosing their nonpublic personal financial information [4.1].
  3. The licensee must protect the confidentiality and security of the participant’s records pertaining to the transaction [4.1].
  4. The licensee must protect against or prevent actual or potential fraud or unauthorized transactions [4.1].

Acceptable Forms of Identification

The following documents or combination of documents may be used to establish an Applicant’s identity and date of birth [1.3]:

  • A U.S. Passport expired no more than 10 years.
  • A driver’s license or identification card issued by any state, including a state that does not require proof of lawful presence to obtain such document, that either has not expired or that expired within the last 10 years.
  • A military identification card or common access card expired no more than 10 years issued by the U.S. Department of Defense that bears a photograph of the Applicant.
  • A life, health, or other insurance record that bears the Applicant’s full legal name, date of birth, and place of birth.
  • An identification card issued within the last 20 years by the Bureau of Indian Affairs or by a federally recognized Native American Tribe, and verified by the issuing authority, that bears a photograph of the Applicant, provided the first and last name and date of birth match the first and last name and date of birth on the document presented by the Applicant.
  • A Veteran’s Administration card that bears a photograph of the Applicant and was issued within the last 20 years.
  • An identity card issued by the Federal Bureau of Prisons or any State Department of Corrections, verified by the issuing authority, provided the first and last name and date of birth match the first and last name and date of birth on the document presented by the Applicant.
  • A valid individual Colorado (issued by the Department) or federal U.S. income tax return, with an Applicant’s copy of an Internal Revenue Service form W-2 or 1099.
  • An Affidavit of Identity that includes the name or names by which the Applicant is known.

Electronic Transactions by Colorado Governmental Agencies

Colorado governmental agencies must follow the policies established by the Governor’s Office of Information Technology (“OIT”) that require electronic transactions to be created by an authorized technology in order to be presumed valid [2.1]. The Policy Authority will authorize technologies for use by Colorado governmental agencies in electronic transactions [2.1]. Electronic transactions with Colorado governmental agencies must employ a technology authorized by the Policy Authority [2.1].

Conclusion

Based on the provided context documents, there are no specific requirements for collecting debit card information from participants in Colorado. However, the licensee must comply with federal and state laws and regulations regarding the collection and disclosure of nonpublic personal financial information and protect the confidentiality and security of the participant’s records pertaining to the transaction. Acceptable forms of identification are listed in [1.3]. Colorado governmental agencies must follow the policies established by the Governor’s Office of Information Technology (“OIT”) that require electronic transactions to be created by an authorized technology in order to be presumed valid [2.1].

Source(s):
Jurisdiction

Colorado