CO HB1210

Prohibits businesses from using automated decision systems to set individualized prices for consumers or wages for workers based on surveillance data, which includes personal characteristics, behaviors, and biometrics obtained through observation or inference

Defines surveillance data broadly to include browsing history, location data, purchase history, financial circumstances, political affiliations, and biometric identifiers gathered, purchased, or otherwise acquired about individuals

Allows exceptions for differential pricing based on cost differences, dynamic supply/demand pricing, publicly disclosed loyalty programs, discounts for social groups (veterans, seniors, students), and insurance pricing that complies with existing regulations

Civil penalties of up to $10,000 per violation, with each affected consumer, worker, or transaction constituting a separate violation; private right of action allows recovery of actual damages or $3,000 per violation, plus treble damages for intentional violations

Requires businesses using automated pricing or wage systems to publish procedures ensuring data accuracy and allowing consumers/workers to request information about and challenge data used in decisions; effective August 12, 2026