Can I collect server log information from participants in Colorado? What are the requirements?

Collecting Server Log Information in Colorado

Based on the information provided in the context documents, it is unclear whether collecting server log information from participants in Colorado falls under the purview of the law. However, if the server log information contains personal identifying information and a third party requests it from a state agency, the state agency must retain a written record of the request and other relevant information [1.1]" >(CORS 24-74-106).

Requirements for Collecting Server Log Information

If a third party makes a request for a record from a state agency and the record contains personal identifying information, the state agency must retain a written record containing the following information [1.1]" >(CORS 24-74-106):

• The request
• The date of the request
• Whether the request was granted or denied
• The name and title of the state agency employee who granted or denied the request
• A description of the articulated purpose of the request
• The identity of the requestor, including the federal office or agency or other entity that requested information, the name of the individual requestor, and, if the requestor is a law enforcement officer, the individual’s badge number
• A summary of why the request was granted or denied

Conclusion

It is recommended to consult with a legal expert to determine the specific requirements for collecting server log information in Colorado.

Source(s):

• [1.1] Record keeping and reporting - requests for records or information - definition.

Jurisdiction

Colorado

• Privacy