{"data":{"id":"us-co/c.r.s.-6-1-1305.5","jurisdiction":"us-co","citation":"C.R.S. § 6-1-1305.5","heading":"Responsibility according to role - processing data of minors.","body":"(1) A processor shall adhere to the instructions of a controller and shall assist the controller to meet the controller's obligations under sections 6-1-1308.5 and 6-1-1309.5, taking into account the nature of the processing and the information available to the processor. The processor shall assist the controller by:\n\n(a) Taking appropriate technical and organizational measures, insofar as this is possible, for the fulfillment of the controller's obligations under section 6-1-1308.5; and\n\n(b) Providing information to enable the controller to conduct and document data protection assessments pursuant to section 6-1-1309.5.\n\n(2) A contract between a controller and a processor must satisfy the requirements in section 6-1-1305 (5).\n\n(3) Nothing in this section shall be construed to relieve a controller or processor from the liabilities imposed on the controller or processor by virtue of the controller's or processor's role in the processing relationship as described in sections 6-1-1308.5 and 6-1-1309.5.\n\n(4) Determining whether a person is acting as a controller or processor with respect to a specific processing of data is a fact-based determination that depends upon the context in which personal data is to be processed. A person that is not limited in the person's processing of personal data pursuant to a controller's instructions, or that fails to adhere to the instructions, is a controller and not a processor with respect to a specific processing of data. A processor that continues to adhere to a controller's instructions with respect to a specific processing of personal data remains a processor. If a processor begins, alone or jointly with others, determining the purposes and means of the processing of personal data, the processor is a controller with respect to the processing and may be subject to an enforcement action under section 6-1-1311.","path":["Title 6 - CONSUMER AND COMMERCIAL AFFAIRS","Article 1 - Colorado Consumer Protection Act","Part 13 - COLORADO PRIVACY ACT"],"source_url":"https://olls.info/crs/crs2026-title-06.htm","current_through":"Colorado Revised Statutes 2026","vintage":"","retrieved_at":"2026-09-14T18:37:45Z","sha256":"042168648cf722a508cc8f0b87692746e52d6242a5b6dd17c7f5ac25187a33c1","source_id":"us-co","stale":false,"prev":"us-co/c.r.s.-6-1-1305","next":"us-co/c.r.s.-6-1-1306"},"notice":"GroundRules: Original legal text. Not legal advice."}