1. (1) A public entity, as defined in section 24-10-103, or a person or entity licensed or regulated by the state, shall not provide information or data, including patient medical records, patient-level data, or related billing information, or expend time, money, facilities, property, equipment, personnel, or other resources for the purpose of assisting or furthering an investigation or proceeding initiated in or by another state, or, to the extent constitutionally permissible, initiated by the federal government, that seeks to impose criminal or civil liability or professional sanction upon a person or entity for engaging in a legally protected health-care activity, as defined in section 12-30-121.
2. (2) Notwithstanding subsection (1) of this section, a public entity, or a person or entity licensed or regulated by the state, may provide information or assistance in connection with an investigation or proceeding in response to a written request from the subject of the investigation or proceeding.
3. (3) This section does not apply to an investigation or proceeding that would be subject to civil or criminal liability or professional sanction under Colorado law if the action was committed in Colorado.

Source: L. 2023: Entire article added, (SB 23-188), ch. 68, p. 250, § 22, effective April 14. L. 2025: (1) and (2) amended, (SB 25-129), ch. 96, p. 439, § 8, effective April 24.