## People demand control of their privacy rights. DataGrail powers the world's most trusted companies to understand and satisfy CPA requirements. ## What is CPA? Colorado's CPA is effective July 1, 2023. The Colorado Privacy Act (CPA) provides comprehensive consumer privacy protections and expands consumer privacy rights for Colorado residents, including through opt-out preference signals. Sharing commonalities with the CPRA and VCDPA, CPA establishes new, modernized definitions for personal data. It enshrines European-style necessity and proportionality principles, tackles data monetization through "sales" and targeted ads, and creates enforceable obligations -- notably conducting "genuine" privacy risk assessments. [Learn More About CPA](/content/solutions/solution-colorado-privacy-act-cpa/#js_solution-features/index.html) ## Who does CPA apply to? CPA applies when in the State you: 1. Collect personal data from 100,000 Colorado residents; or 2. Collect data from 25,000 Colorado residents and derive revenue from the sale of personal data. 3. There is no annual revenue threshold or consideration for company size. Some CPA obligations do not apply to B2B organizations. It also has numerous entity-level and data-level exemptions, notably for data subject to US federal laws such as GLBA, HIPAA and FCRA. [How DataGrail Helps](/content/solutions/solution-colorado-privacy-act-cpa/#js_datagrailhelps/index.html) ## Operationalize CPA Compliance ## Respect Personal Data Decisions ### Data Subject Requests Consumers have the right to ask businesses to access and delete their data. Automate the process for them to build brand trust and save your team’s time (and money). [STREAMLINE PRIVACY REQUESTS](/content/platform/request-manager/index.html) ## Put the Power in Consumers' Hands ### Opt-Out Support Consumers are [increasingly opting out of](/content/resources/interactive/2022-consumer-privacy-survey/index.html) their data being “sold”, including for advertising purposes. Lead with respect and prevent their data from being sold, bartered, exchanged, or monetized. [HANDLE OPT-OUTS](/content/platform/request-manager/index.html) ## Go Beyond the Template ### Privacy Assessments When it comes time to complete a Data Protection Impact Assessment (DPIA) or Privacy Impact Assessment (PIA), rely on a solution that leverages 2,500+ deep integrations to auto-populate responses. [AUTOMATE DPIAs & PIAs](/content/platform/risk-monitor/index.html) ## Future-Proof Against Risk ### Uphold Brand Trust The legislative landscape around privacy is changing every day. DataGrail keeps request policies and functionality up-to-date to support compliance with international and US state privacy laws, and whatever comes next. [THE PRIVACY AWAKENING](/content/resources/interactive/2022-consumer-privacy-survey/index.html) [Get a 1:1 Walkthrough](/content/demo/?ir=_solutions_solution-colorado-privacy-act-cpa_/index.html) “DataGrail has supported and guided us through CCPA, CPRA, and GDPR compliance.”” E-Commerce VP [Read More](https://www.g2.com/products/datagrail/reviews) ## How DataGrail Can Help with CPA It's time to see what a Privacy Control Center can do for you. ### CPA Requirements ### Handle It with DataGrail Centralize privacy requests (DSRs) like Access, Deletion, Portability and others [Request Manager](/content/platform/request-manager/index.html) Branded intake forms, Operations Dashboard, search and filters Verify requestor identity, proportionally [Request Manager](/content/platform/request-manager/index.html) Smart Verification™ uses pre-existing data with Authorized Agent support Fulfill DSRs safely, collaboratively and on time [Request Manager](/content/platform/request-manager/index.html) Customizable SLAs and workflows, authorized handoffs and alerts Honor Do Not Sell opt-out requests [Request Manager](/content/platform/request-manager/index.html) Multichannel handling with GPC opt-out signal recognition Document your data and processing purposes [Live Data Map](/content/platform/live-data-map/index.html) Auto-detect systems containing personal data, generate dynamic RoPAs Maintain data maps and processing records (RoPAs) [Live Data Map](/content/platform/live-data-map/index.html) Proprietary taxonomy and exports driving standardized summaries Conduct Data Protection / Privacy Impact Assessments [Risk Monitor: Assessments](/content/platform/risk-monitor/index.html) Assess vendors and high-risk processing activities at scale Take holistic stock of your privacy footprint [Integration Network](/content/integrations/index.html) Tight integrations with 2,500+ apps and platforms, from salestech to HRIS Focus your internal teams on their most strategic work [Managed Services](/content/integrations/index.html) Access to a dedicated privacy manager who helps build a scalable program and manage DSR processes ### Get Up to Speed Fast on CPA Guide ## [CPA Explained](/content/blog/data-privacy/guide-to-colorado-state-privacy-law/index.html) Learn about the Colorado consumer privacy law, its requirements for businesses, and what this means in relation to the CCPA/CPRA and a holistic privacy management program. [Read the Guide](/content/blog/data-privacy/guide-to-colorado-state-privacy-law/index.html) In the News ## ['Do Not Sell' Compliance](/content/resources/webinars/your-cpra-foundation/index.html) The Californian right to opt-out of data "sales" has been adopted into other US State privacy laws, including CPA. CPRA co-author Rick Arney weighs in on the underlying issues affecting all US businesses. [Watch the Interview](/content/resources/webinars/your-cpra-foundation/index.html) Foundations ## [Data Protection Impact Assessments](/content/blog/data-privacy/what-are-data-protection-impact-assessments-dpia/index.html) Learn what DPIAs are, what they require, and why they are an essential to your privacy management program. [Read the Guide](/content/blog/data-privacy/what-are-data-protection-impact-assessments-dpia/index.html) “DataGrail helped us reduce compliance risk. Our adoption of DataGrail has only increased over time and it's great to have a knowledgeable partner as we look to the next year with CPRA going into effect.” Verified User in Software Mid-Market (51-1000 emp.) [Read More](https://www.g2.com/products/datagrail/reviews) ## Resources for every step of your data privacy journey Privacy Primer: Mastering the Data Privacy Basics [Learn More](/content/resources/reports/privacy-primer-data-privacy-basics/index.html) Data Privacy Solution Buyer’s Guide [Learn More](/content/?post_type=report&p=7267/index.html) Meet DataGrail: On-Demand [Learn More](/content/?post_type=webinar&p=7165/index.html) Curious about how it all works? Learn more about the DataGrail Platform [Learn More](/content/platform/index.html) [Request a Demo](/content/demo/?ir=_solutions_solution-colorado-privacy-act-cpa_/index.html) Whether you're an expert or just starting out, join the privacy community for professionals who lead with trust. [Join the Community](/content/community/index.html)