Beginning Sept. 1, 2018, Colorado businesses have just 30 days to inform customers if their private data has been compromised. See the article from the Denver Business Journal on the law requiring more protection of consumer data. Read more about the bill here.