CO HB1090

Requires consumer reporting agencies to automatically place security freezes on consumer reports for individuals under 18 years of age at no cost, with automatic removal when they turn 18 unless a request to maintain the freeze is made between 1-6 months before their 18th birthday.

Authorizes guardians to request security freezes for protected consumers (minors or individuals with legal guardians) even if no consumer report exists, requiring agencies to create a consumer record and place a freeze.

Prohibits consumer reporting agencies from charging fees for placing, temporarily lifting, partially lifting, or permanently removing security freezes on protected consumers' reports or records.

Establishes procedures allowing guardians to temporarily lift freezes, grant access to specific third parties, or permanently remove freezes, with consumers able to authorize actions directly once they demonstrate their guardian's authority is no longer valid.

Requires consumer reporting agencies to notify guardians and protected consumers within 5 business days of freeze placement with instructions for managing the freeze and provide a unique personal identifier for authorizing freeze modifications.