Colorado Revised Statutes Title 24. Government State § 24-72-502. Creation of a privacy policy for governmental entities

(a) A general statement declaring support for the protection of individual privacy;

(b) A provision for the minimization of the collection of personally identifiable information to the least amount of information required to complete a particular transaction;

(c) Clear notice of the applicability of the “Colorado Open Records Act” pursuant to part 2 of this article;

(d) A method for feedback from the public on compliance with the privacy policy; and

(e) A statement that the policy extends to the collection of all personally identifiable information, regardless of the source or medium.

(2)(a) Any governmental entity that operates a world wide website as of August 7, 2002, shall establish and publish on its website a privacy policy pursuant to this part 5 no later than July 1, 2003.

(b) Any governmental entity that does not operate a world wide website as of August 7, 2002, and begins operation of a website before July 1, 2003, shall establish and publish on its website a privacy policy pursuant to this part 5 by July 1, 2003.

(c) In no event shall a governmental entity be permitted to operate a world wide website after July 1, 2003, without first establishing a privacy policy pursuant to this part 5. The privacy policy shall be published on such governmental entity's website as of the first day of operation of such website.