1. (1) Beginning January 1, 2022, to be granted access to personal identifying information through a database or automated network that is not publicly available information, a third party must have, within the past year, certified under penalty of perjury that:

   1. (a) The third party will not use personal identifying information obtained from the database or automated network for the purpose of investigating for, participating in, cooperating with, or assisting in federal immigration enforcement, including enforcement of civil immigration laws and 8 U.S.C. sec. 1325 or 1326, unless required by federal or state law or to comply with a court-issued subpoena, warrant, or order; and
   2. (b) The third party will not disclose personal identifying information obtained from the database or automated network to individuals or entities engaged in investigating for, participating in, cooperating with, or assisting in federal immigration enforcement, including enforcement of civil immigration laws and 8 U.S.C. sec. 1325 or 1326, unless required by federal or state law or to comply with a court-issued subpoena, warrant, or order.
2. (2) The attorney general's office shall create a model certification form and make it available to state agencies and political subdivisions.

Source: L. 2021: Entire article added, (SB 21-131), ch. 353, p. 2296, § 1, effective June 25. L. 2025: (2) amended, (SB 25-276), ch. 240, p. 1215, § 10, effective May 23.

Cross references: For the legislative declaration in SB 25-276, see section 1 of chapter 240, Session Laws of Colorado 2025.