# What is the CPA?

[The Colorado Privacy Act (CPA) (opens in a new tab)](https://leg.colorado.gov/sites/default/files/2021a_190_signed.pdf) is a comprehensive consumer privacy law that protects the data privacy of all Colorado residents. CPA will go into effect this summer on July 1, 2023, following the [California Privacy Rights Act (CPRA)](/content/docs/regulations/ccpa/index.html) and the [Virginia Consumer Data Protection Act (VCDPA)](/content/docs/regulations/vcdpa/index.html).

Your business can take steps to comply with Colorado’s privacy by following this guide.

## Who is Subject to CPA? [Permalink for this section](/content/docs/regulations/cpa/what_is_cpa#who-is-subject-to-cpa/index.html)

CPA applies to businesses or “controllers“ that operate within Colorado or targets products and services to Colorado residents and either:

- Control or process the personal data of at least 100,000 consumers per year, or
- Control or process personal data of at least 25,000 consumers and generate revenue or receive discounts from selling personal data

[CPA - Colorado Privacy Act](/content/docs/regulations/cpa "CPA - Colorado Privacy Act"/index.html) [What are requirements of the CPA?](/content/docs/regulations/cpa/what_reqs_cpa "What are requirements of the CPA?"/index.html)