Colo. Rev. Stat. § 24-74-107
Data privacy breaches - civil penalty - legislative declaration.
Effective May 23, 2025L. 2021: Entire article added, (SB 21-131), ch. 353, p. 2298, § 1, effective June 25. L. 2025: Entire section amended, (SB 25-129), ch. 96, p. 441, § 11, effective April 24; Entire section amended, (SB 25-276), ch. 240, p. 1215, § 12, effective May 23.
- (1) A state agency employee or political subdivision employee who intentionally violates a provision of this article 74 or section 25-2-108.5 is subject to an injunction and is liable for a civil penalty of not more than fifty thousand dollars for each violation.
- (2) Any civil penalty money collected pursuant to subsection (1) of this section for immigration-related violations must be transferred to the state treasurer, who shall credit it to the immigration legal defense fund established pursuant to section 8-3.8-101.
- (3) For purposes of an action for a temporary restraining order or preliminary injunction brought pursuant to this section, the general assembly finds and declares that violation of this article 74 poses a real, immediate, and irreparable injury for which there is no plain, speedy, and adequate remedy at law, and the public interest is served by compliance with this article 74.
Source: L. 2021: Entire article added, (SB 21-131), ch. 353, p. 2298, § 1, effective June 25. L. 2025: Entire section amended, (SB 25-129), ch. 96, p. 441, § 11, effective April 24; Entire section amended, (SB 25-276), ch. 240, p. 1215, § 12, effective May 23.
Editor's note: Amendments to this section by SB 25-129 and SB 25-276 were harmonized.
Cross references: For the legislative declaration in SB 25-276, see section 1 of chapter 240, Session Laws of Colorado 2025.