4 Colo. Code Regs. § 723-1-1104
Current through Register Vol. 47, No. 23, December 10, 2024
Section 4 CCR 723-1-1104 - Personal Information - Collection(a) A regulated entity shall collect only that personal information, including information regarding credit worthiness that is necessary to provide, bill, and collect for services. Information regarding credit worthiness may include, but is not limited to: the customer's employer; the employer's phone number; the customer's landlord's name, address, and phone number; and the customer's previous regulated service supplier. A regulated entity may request, but shall not require, a customer's Social Security Number as a prerequisite to evaluating credit worthiness or to providing regulated service.(b) If a regulated entity collects personal information concerning a customer, then not later than three months after first billing the customer, the regulated entity shall notify the customer, in writing of his or her right to request a copy of any or all personal information that the regulated entity holds concerning that customer, including a true copy of that information. Upon such request and upon verification of the customer's identity, the regulated entity shall provide the requested information and shall take all necessary steps to explain the information to the customer.(c) A customer may request in writing an amendment of the personal information held by a regulated entity. Within 30 days of the request, the regulated entity shall: (I) verify and correct any portion of a record that is not accurate, timely, or complete, and inform the customer in writing of the corrections; or(II) inform the customer in writing of its refusal to amend the record in accordance with the request, give a reason for the refusal, clearly note any portion of the record that is disputed, and include in its records the customer's concise statement of disagreement. The regulated entity shall also inform the customer of his or her right to file a complaint with the Commission regarding the disputed personal information.38 CR 02, January 25, 2015, effective 2/14/201538 CR 20, October 25, 2015, effective 11/14/201543 CR 13, July 10, 2020, effective 7/30/202045 CR 07, April 10, 2022, effective 4/30/2022