# Privacy, Access, and Disclosure

**Citation:** 4 CCR 723-4 Rule 4027  
**Type / status:** regulation / current  
**Agency:** Colorado Public Utilities Commission  
**Effective:** Not stated  
**Published:** Not stated

(a) A utility shall protect customer data in the utility's possession or control to maintain the privacy of customers, while providing reasonable access to that data. A utility is only authorized to use customer data to provide regulated utility service in the ordinary course of business. (b) A util

## Document text

(a) A utility shall protect customer data in the utility’s possession or control to
maintain the privacy of customers, while providing reasonable access to that
data. A utility is only authorized to use customer data to provide regulated utility
service in the ordinary course of business.
(b) A utility shall not disclose customer data unless such disclosure conforms to
these rules, except as required by law or to comply with Commission rule.
Illustratively, this includes responses to requests of the Commission, warrants,
subpoenas, court orders, or as authorized by § 16-15.5-102, C.R.S.
(c) A utility shall include in its tariffs a description of customer data that the utility is
able to provide to the customer or to any third party recipient to whom the
customer has authorized disclosure of the customer’s data within the utility’s
technological and data capabilities. At a minimum, the utility’s tariff must provide
the following:
(I) a description of standard customer data and non-standard customer data
and the frequency of customer data updates that will be available (annual,
monthly, daily, etc.);
(II) the method and frequency of customer data transmittal and access
available (electronic, paper, etc.) as well as the security protections or
requirements for such transmittal;
(III) a timeframe for processing requests;
(IV) any rate associated with processing a request for non-standard customer
data; and
(V) any charges associated with obtaining non-standard customer data.
(d) As part of basic utility service, a utility shall provide access to the customer’s
standard customer data in electronic machine-readable form, without additional
charge, to the customer or to any third party recipient to whom the customer has
authorized disclosure of the customer’s customer data. Such access shall
conform to nationally recognized open standards and best practices. The utility
shall provide access in a manner that ensures adequate protections for the
utility’s system security and the continued privacy of the customer data during
transmission.

(e) Nothing in these rules shall limit a customer’s right to provide his or her customer
data to anyone.
(f) A utility and each of its directors, officers and employees that discloses customer
data pursuant to a customer’s authorization in accordance with these data
privacy rules shall not be liable or responsible for any claims for loss or damages
resulting from the utility’s disclosure of customer data.

## Provenance

- Official: Yes
- Source: <https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4>
- Source ID: `co-sos-ccr`
- SHA-256: `e0b33968712a961765402065e11522a5507e64f9fe7363cde7698678939fda7a`
- Retrieved: 2026-08-12T04:36:48.096Z
- Exported: 2026-08-22T22:07:59.477Z
- Document slug: `co-ccr-4-723-4-4027`

### Source metadata

```json
{
  "jurisdiction": "US-CO",
  "code": "4 CCR 723-4",
  "ruleKey": "4027",
  "pipelineScope": "colorado-jurisdictional-gas-utilities",
  "legalScope": "Current 4 CCR 723-4 rules regulating Colorado jurisdictional gas utilities and gas master-meter operators, including construction, operation, system safety, gas infrastructure planning, metering, service, and enforcement provisions. This is an adjacent gas-utility corpus, not a replacement for the repealed dedicated 4900-series pipeline-safety rules.",
  "applicabilityCaveat": "Part 4 applies according to Colorado Public Utilities Commission jurisdiction and each rule's scope. The former dedicated pipeline-safety rules 4900 through 4975 are reserved after repeal; this connector does not represent them as current. Part 4 does not replace federal pipeline-safety requirements, determine whether a facility is interstate or intrastate, or resolve operator-specific orders, waivers, tariffs, or later rulemaking.",
  "references": [
    {
      "citation": "16-15.5-102 C.R.S.",
      "referenceType": "colorado-revised-statutes",
      "url": null
    }
  ],
  "ruleInfoUrl": "https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4",
  "pucRulesUrl": "https://puc.colorado.gov/gasrulesandregulations",
  "ruleVersionId": "12549",
  "editionEffectiveOn": "2026-06-14",
  "publicationStatus": "The Colorado Secretary of State identifies the source as the official publication of state administrative rules. The edition date applies to the compiled rule version and is not represented as the effective date of every provision.",
  "rights": "Official state rule text is preserved with attribution and source links. Public accessibility does not imply rights in agency marks, third-party material, or incorporated standards; commercial redistribution requires review.",
  "region": "CO"
}
```