Colorado data security and disposal law
Colorado Revised Statutes, Sections 6-1-713, 6-1-713.5 and 6-1-716
- Applies to
- Businesses that keep paper or electronic documents with personal identifying information about Coloradans.
- What it asks
- A written policy for destroying those documents when no longer needed, reasonable security, and notice to affected residents within 30 days of determining a breach, plus the Attorney General when 500 or more are affected.
- What the software does
- Retention schedules per document type with a destruction schedule turn the written policy into something that runs on its own.