Colorado Privacy Act
Colorado Privacy Act: Processor and Assessments (6-1-1305/1309)

Colorado Privacy Act COPA-1305-PROCESSOR: Processor Contracts and Role Responsibility

Processing by a processor must be governed by a contract that sets out instructions, nature/purpose, data types, duration, and obligations (confidentiality, sub-processor flow-down, deletion/return, audits, assistance).

Other controls in Colorado Privacy Act: Processor and Assessments (6-1-1305/1309)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.