SECURITY ADDENDUM (ENTERPRISE SAAS)
Colorado Jurisdictional Version
KEY PROVISIONS
Data Breach Notification (C.R.S. Section 6-1-716)
- Notify within 30 days of breach determination
- If >500 Colorado residents, notify Attorney General
- If >1,000, notify credit reporting agencies
Colorado Privacy Act (C.R.S. Section 6-1-1301 et seq.)
- Consumer rights: access, correction, deletion, portability, opt-out
- Data protection assessments required
- Contracts must restrict subprocessor use
Personal Information Definition
Name plus: SSN, driver's license, financial account, medical info, health insurance, biometric data, username/password.
Trade Secrets
C.R.S. Section 7-74-101 et seq.
E-Signatures
C.R.S. Section 24-71.3-101 et seq.
Late Payment
8% statutory (C.R.S. Section 5-12-101)
Forum
Denver County (exclusive). Jury waiver permitted.
EXECUTION
☐ Master Agreement referenced ☐ Colorado-licensed counsel review