Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect personal information from my customers in California in Colorado? What are the requirements?

Collecting Personal Information from Customers in California in Colorado

Based on the provided context documents, it appears that Colorado privacy regulations apply to licensees operating in Colorado [1.2]([1.2]). However, it is unclear whether collecting personal information from customers in California falls under the scope of these regulations.

To collect personal information from customers in California, you must comply with the California Consumer Privacy Act (CCPA) [1.1]. The CCPA applies to businesses that collect personal information from California residents and meet certain criteria, such as having annual gross revenues over $25 million, buying, receiving, or selling the personal information of 50,000 or more consumers, households, or devices, or deriving 50 percent or more of their annual revenues from selling consumers’ personal information.

If your business meets the criteria, you must provide California residents with certain notices, such as a notice at collection informing them of the categories of personal information you collect and the purposes for which it will be used, and a privacy policy that describes their rights under the CCPA [1.1]. You must also provide them with the right to opt-out of the sale of their personal information and the right to request that their personal information be deleted [1.1].

Additionally, if you are collecting personal financial information, you must comply with the Colorado privacy regulations [1.2]([1.2]). These regulations limit the disclosure and use of nonpublic personal financial information and require licensees to provide consumers with an initial notice and an opt-out notice [1.4]([1.4]).

Therefore, to collect personal information from customers in California in Colorado, you must comply with both the CCPA and the Colorado privacy regulations.

Requirements for Collecting Personal Information

To collect personal information from customers in California in Colorado, you must comply with the following requirements:

  1. Comply with the California Consumer Privacy Act (CCPA) if your business meets the criteria [1.1].
  2. Comply with the Colorado privacy regulations if you are collecting personal financial information [1.2]([1.4]).
  3. Provide California residents with certain notices, such as a notice at collection and a privacy policy [1.1].
  4. Provide California residents with the right to opt-out of the sale of their personal information and the right to request that their personal information be deleted [1.1].
  5. Provide consumers with an initial notice and an opt-out notice if you are collecting personal financial information [1.4]([1.4]).

Please note that this response is based on the provided context documents and may not be exhaustive.

[1.1]:

Source(s):
Jurisdiction

Colorado, California