Student data privacy laws, contacts, and resources for Colorado. Browse all states for more complete ecosystem guides.
FERPA
HB 14-1294, HB 16-1423
Data inventory and security management.
HB 18-1128 (Colo. Rev. Stat. § 6-1-713)
Breach and PII disposal.
SB 24-205 (Colo. Rev. Stat. § 6-1-1701, effective Feb 1, 2026)
Bans algorithmic discrimination.
State Board of Education/Department of Education (data inventory & security per HB 14-1294); Colorado Attorney General (AI oversight per SB 24-205).
SBE must publish data inventory; CPA mandates privacy risk assessments; mandatory breach notification within 30 days; HB 21-1110 web accessibility.
SB 205 (effective 2026) bans algorithmic discrimination; 2024 Statewide Roadmap for AI in K-12; 2025 AI Skills Progression Guide.
Every state has a public records law, the Colorado equivalent of a FOIA request. Parents, educators, and advocates can use these laws to request records about software agreements, data-sharing practices, and AI tool approvals.
Records access is privacy in action. Knowing what agreements exist, and being able to verify them, is the first step in holding districts accountable.
Search vendor and product DPAs by company, product, or district from the SDPC registry.
Districts that go from single-digit to 90%+ compliance do it by building the right infrastructure: standardized DPAs, a public registry, and clear governance frameworks. We can help your state do the same.
Take the ABYA Privacy & AI Governance training course to build your district's compliance readiness.
Start training →