The Colorado Privacy Act (CPA) grants consumers the right to access, correct, or delete their personal

data, including sensitive data, that is processed by a controller1. Sensitive data is defined as personal

data that reveals racial or ethnic origin, religious beliefs, mental or physical health condition or

diagnosis, sex life or sexual orientation, citizenship or citizenship status, genetic or biometric data, or

personal data from a known child2. The CPA also grants consumers the right to opt out of the

processing of their personal data for purposes of targeted advertising, the sale of personal data, or

certain kinds of profiling3. However, the CPA does not grant consumers the right to limit the use of

sensitive data for other purposes, such as providing a product or service requested by the consumer,

complying with legal obligations, or protecting the vital interests of the consumer or another

person. Therefore, option D is the correct answer, as it is not a privacy right available under the

CPA. Reference: 1: Colorado Privacy Act (CPA) - Colorado Attorney General 2: Protect Personal Data

Privacy | Colorado General Assembly 3: SENATE BILL 21-190 Woodward, Garcia; PRIVACY. COLORADO

PRIVACY ACT … : Colorado Privacy Act: What You Need to Know | OneTrust DataGuidance