Privacy Law Library

Colorado Consumer Credit Reporting Act

Colorado CCRA

Credit reporting · Financial

Colorado's credit reporting law (recodified in 2017 from earlier law) limits when consumer reports may be furnished, restricts reporting of old or sensitive items, and gives consumers free disclosure, dispute, identity-theft block, and security freeze rights, including freezes for protected minors. Since 2023 agencies may not report adverse medical debt information (HB 23-1126), a provision set to repeal July 1, 2028.

Where
Colorado
Citation
C.R.S. 5-18-101 to 5-18-118
Status
In force
In force since
2017-08-09
Last amended
2023-08-07
Enforced by
Consumers through private actions; Colorado Attorney General (Uniform Consumer Credit Code administrator)
People can sue
Yes
Penalties
Willful violations: the greater of three times actual damages or $1,000 per security-freeze violation or disputed inaccurate or unblocked entry, plus attorney fees; negligent violations: the greater of actual damages or $1,000, plus fees in some cases (5-18-117).
Applies to
  • Consumer reporting agencies furnishing consumer reports on Colorado consumers, and users of those reports (5-18-103, 5-18-104)

Rights it gives people

  • On request and identification, disclose all information in the consumer's file, including who requested it in the prior 12 months.C.R.S. 5-18-106(1)
  • Reinvestigate disputed items free of charge within 30 business days and notify the furnisher within five business days.C.R.S. 5-18-110(1)-(2)
  • Place a security freeze within five business days of a request, confirm within ten business days with a PIN or password, and not release frozen reports without authorization.C.R.S. 5-18-112(1)-(2)
  • Allow representatives to place security freezes for protected consumers (minors and incapacitated persons).C.R.S. 5-18-112.5
  • Within 30 days after receiving a police report or court order, permanently block reported information the consumer identifies (for example identity-theft entries).C.R.S. 5-18-111

Practices it requires

  • Furnish consumer reports only for permissible purposes such as court orders, the consumer's written instructions, credit transactions, and other listed uses.C.R.S. 5-18-104(1)
  • Do not report obsolete items (bankruptcies over 10 years, most other adverse items over 7 years), sealed or expunged records, records without conviction, or adverse medical debt information.C.R.S. 5-18-109(1) · Only if: Medical debt ban repeals 2028-07-01

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: 2025-2026 session laws were not checked for amendments to article 18. | The Attorney General's enforcement role under article 18 was not confirmed from the statutory text.

Research reference, not legal advice.