4 Colo. Code Regs. § 904-3-7.07

Current through Register Vol. 47, No. 16, August 25, 2024

Section 4 CCR 904-3-7.07 - REFUSING OR WITHDRAWING CONSENT

A. A Consumer shall be able to refuse or revoke Consent as easily and within a similar number of steps as Consent is affirmatively provided.

B. If Consent is obtained through an electronic interface, the Consumer shall be able to refuse or withdraw Consent through the same or similar electronic interface.

C. When using an electronic interface, and when feasible based on the Consumer's relationship with the Controller, a Controller may allow Consumers to track what Processing activities they have Consented to or opted out of.

D. There shall be no detriment to a Consumer for refusing or withdrawing Consent, consistent with C.R.S. § 6-1-1308(1)(c)(II), and 4 CCR 904-3, Rule 6.05.

1. Notwithstanding 4 CCR 904-3 rule 7.07 , if a Consumer refuses to Consent to, or withdraws consent for the Processing of Sensitive Data or Personal Data strictly necessary for a program, product or service, the Controller is no longer obligated to provide that program, product or service.

E. If a Consumer withdraws Consent for a Processing activity, subject to Consent under C.R.S. §§ 6-1-1306(1)(a)(IV)(C), 1308(4), and 1308(7), the Controller shall cease that Processing activity and, in the notice required by C.R.S. § 6-1-1306(2), provide the Consumer instructions on how to exercise the right to deletion, provide a link to exercise the right to deletion, or inform the Consumer that information regarding the right to delete their Personal Data can be found in the Controller's privacy notice.

4 CCR 904-3-7.07

46 CR 06, March 25, 2023, effective 7/1/2023