Most people have no idea how strict Colorado’s consumer laws just became. Seriously. In 2026, the state rolled out some of the toughest protections in the country. We’re talking new rules about hidden fees, AI systems, subscription traps, and your personal data. Let’s break down what you actually need to know.
What Are Consumer Protection Laws?
Think of consumer protection laws as rules that stop businesses from treating you unfairly. They cover everything from false advertising to hidden charges. Colorado has its own main law called the Colorado Consumer Protection Act. It’s been around since 1969, but the state keeps updating it to match how businesses operate today.
These laws exist because some businesses get creative with fees. Or they make it impossible to cancel subscriptions. Or they hide important information in tiny print. Colorado decided enough was enough.
The New Honest Pricing Law (Starts January 2026)
Okay, this one’s important.
Starting January 1, 2026, businesses in Colorado can’t play games with pricing anymore. House Bill 25-1090 bans what lawmakers call “drip pricing.” That’s when you see one price, then suddenly more fees appear at checkout.
How It Works
Here’s the deal. Every price you see has to include all mandatory fees upfront. No surprises. No “plus fees” or “excludes surcharges” nonsense.
This applies to basically everything. Rental properties, restaurant menus, online stores, service businesses. If you’re buying it in Colorado, the price you see first must be the total price you pay.
What About Restaurants and Delivery Apps?
Restaurants have specific rules now. They must clearly show any mandatory service charges. Not just the amount, but how it’s divided between staff and the business. Honestly, this part should’ve been required years ago.
Delivery apps need to display all fees when you select your order. Flat fees, variable fees, everything. No hidden charges that appear right before you confirm.
The Landlord Rules
Landlords, listen up. You need to show the total monthly cost in your listings. Security deposits, application fees, pet fees. All of it needs to be clear before someone applies.
Any lease clause that breaks these rules? Invalid. Colorado law won’t enforce it.
Easy Subscription Cancellations (Starts February 2026)
Hold on, this part is huge.
Senate Bill 145 goes into effect February 16, 2026. It requires businesses to make canceling subscriptions as easy as signing up. If you signed up online, you can cancel online. One click. That’s it.
The One-Click Rule
Companies can show you retention offers when you try to cancel. Think discounts or special deals. But they have to display a direct cancellation link right alongside those offers. And that link has to work immediately.
No more calling during business hours. No more navigating through five menu options. No more “please speak to a representative.” Companies that make you jump through hoops are breaking the law.
What This Means for You
Wondering if this applies to you? Basically, if you have any subscription services, gym memberships, streaming platforms, or auto-renewal contracts, you’re covered. Most people don’t realize how much easier this makes things.
Your Data Privacy Rights (Active Now)
The Colorado Privacy Act has been in effect since July 2023. But many people still don’t know their rights. Let me break it down.
What Personal Data Means
Personal data is any information that can be linked back to you. Your name, email, purchase history, location data. Even your browsing habits. The law protects all of it.
Sensitive data gets extra protection. This includes health information, race or ethnicity, sexual orientation, religious beliefs, and data about kids under 13.
Your Four Main Rights
You have the right to access your data. Companies must tell you what they’ve collected about you.
You can request corrections if information is wrong. Pretty straightforward.
You can delete your data in most cases. Companies must comply unless they have a legal reason to keep it.
You can opt out of data sales and targeted advertising. This is huge. Companies can’t just sell your information without permission.
Who This Law Applies To
Not every business has to follow these rules. The law targets bigger operations. Specifically, businesses that either process data from 100,000 or more people per year, or make money from selling data of 25,000 or more people.
Sound complicated? It’s actually not. If a company does business in Colorado and handles significant amounts of personal data, they’re covered.
The AI Protection Law (Starts June 2026)
Now, here’s where things get interesting.
Colorado became the first state to regulate artificial intelligence in consumer interactions. Senate Bill 24-205 takes effect June 30, 2026. Originally it was scheduled for February, but lawmakers delayed it to give businesses more time.
What It Covers
The law prevents “algorithmic discrimination” in high-risk AI systems. That means AI can’t make biased decisions that affect your employment, housing, healthcare, credit, or education.
Companies using AI for these decisions must use reasonable care. They need to test their systems. Document their processes. Report problems to the Attorney General.
AI Disclosure Rules
If you’re interacting with an AI system, companies must tell you. Unless it’s totally obvious. Like, chatbots should identify themselves as AI. But nobody needs to announce that autocorrect is AI-powered.
This protects you from thinking you’re getting human judgment when you’re actually getting algorithmic decisions.
What Happens When Laws Are Broken?
Let’s talk consequences. Colorado doesn’t mess around with consumer protection violations.
Civil Penalties Under the Consumer Protection Act
For most violations, businesses face up to $20,000 per violation. That’s per violation, not total. So if a company scams 100 people, that’s potentially $2 million in penalties.
Violations against elderly people cost even more. Up to $50,000 per violation. And there’s no cap on total penalties anymore. The old $500,000 limit was removed in 2019.
What You Can Recover
If a business violates the Consumer Protection Act, you can sue them. You might recover your actual damages. Courts can also award you $500 per violation minimum. Plus attorney fees if you win.
Before filing a lawsuit, you must send a written demand. Give the business 14 days to respond. If they ignore you or refuse to make things right, then you can sue.
Privacy Law Violations
The Colorado Privacy Act works differently. Only the Attorney General and district attorneys can enforce it. You can’t sue directly for privacy violations.
But you can file complaints. The Attorney General investigates and can force businesses to change their practices. They can also impose penalties and require businesses to pay restitution.
Special Protections for Kids Online
Colorado added special protections for minors in 2025. These rules started October 1, 2025.
If a company knows it’s collecting data from kids under 18, stricter rules apply. They need parental consent for sensitive data. They can’t use kids’ data for targeted advertising without permission. And they must provide age-appropriate privacy notices.
Parents have the right to access and delete their children’s data. Companies that violate these rules face the same penalties as other privacy violations.
How to Protect Yourself
Okay, pause. Read this carefully. You have more power than you think.
Check Your Subscriptions
Log into your accounts. Look at what you’re paying for. If something has auto-renewal, you can cancel it online now. Companies can’t make it harder than it needs to be.
A lot of people pay for subscriptions they forgot about. Seriously. Check right now. You might be surprised.
Review Privacy Policies
I know, nobody likes reading privacy policies. But you should at least skim them. Look for sections about data sales and targeted advertising.
Most companies have an “opt out” link somewhere. Use it. You don’t need to let companies sell your information.
Exercise Your Rights
If a business won’t show you their total price upfront, report them. If they won’t let you cancel online, that’s a violation. If they’re selling your data without clear consent, you can opt out.
Don’t assume you’re stuck with unfair business practices. The law is on your side now.
Document Everything
Save your receipts. Screenshot prices. Keep emails. If you end up needing to file a complaint or demand a refund, documentation helps.
Trust me, this works. Businesses take complaints more seriously when you have proof.
Filing Complaints in Colorado
Need to report a business? Here’s what to do.
Contact the Attorney General
The Colorado Attorney General’s Consumer Protection Section handles most complaints. You can file online through their website. They investigate scams, false advertising, unfair business practices, and privacy violations.
You’re not alone in this. Most people don’t realize how common these complaints are.
What Information You Need
Be ready to provide details. What happened? When? What business? How much money is involved? What have you tried already?
The more specific you are, the better. Vague complaints are harder to investigate.
Other Resources
For pricing violations specifically, you might also contact your local district attorney. They have enforcement power too.
For privacy issues, check the Attorney General’s Technology and Privacy Protection Unit. They specialize in data protection.
What’s Coming Next?
Colorado keeps updating its consumer laws. The state legislature meets every year. New protections are always under consideration.
Right? You need to stay informed. Laws change. Your rights expand. Businesses get new requirements.
The trend is clear though. Colorado wants stronger consumer protections. More transparency. Less hidden fees. Better privacy controls. Easier cancellations.
Frequently Asked Questions
Does the honest pricing law apply to taxes? No. The law requires all mandatory fees to be included, but sales tax doesn’t have to be. Taxes are still typically shown at checkout.
Can I cancel a gym membership online now? Yes, if you signed up online. Starting February 16, 2026, gyms must provide online cancellation if you enrolled online. They can offer you deals to stay, but they have to process your cancellation immediately if you decline.
What if a business doesn’t honor my privacy rights request? File a complaint with the Colorado Attorney General. They enforce the Privacy Act. You can’t sue directly, but the AG can investigate and force compliance.
Are small businesses exempt from these laws? It depends. The honest pricing law applies to all businesses in Colorado. The Privacy Act only applies to larger companies that meet specific thresholds. Most consumer protection rules apply regardless of business size.
How long do companies have to respond to data requests? Under the Colorado Privacy Act, businesses have 45 days to respond to your request. They can extend this by 45 more days if needed, but they must tell you why.
Final Thoughts
Colorado’s consumer laws are getting serious. The state ranks near the bottom nationally for consumer protections, but that’s changing fast. These new laws put real teeth into enforcement.
Now you know the basics. Businesses can’t hide fees anymore. You can cancel subscriptions easily. Your data has real protections. And AI systems can’t discriminate against you.
Stay informed, know your rights, and don’t be afraid to use them. When in doubt, document everything and file a complaint. The Attorney General wants to hear from you.
References
- Colorado General Assembly – HB 25-1090 (Deceptive Pricing Practices Law): https://leg.colorado.gov/bills/hb25-1090
- Colorado General Assembly – SB 25-145 (Online Cancellation of Automatic Renewal Contracts): https://leg.colorado.gov/bills/sb25-145
- Colorado General Assembly – SB 24-205 (Consumer Protections for Artificial Intelligence): https://leg.colorado.gov/bills/sb24-205
- Colorado Attorney General – Consumer Protection Section: https://coag.gov/office-sections/consumer-protection/
- Colorado Attorney General – Colorado Privacy Act Information: https://coag.gov/resources/colorado-privacy-act/
