# Access to Customer Data for the Provision of Regulated Utility Service

**Citation:** 4 CCR 723-4 Rule 4030  
**Type / status:** regulation / current  
**Agency:** Colorado Public Utilities Commission  
**Effective:** Not stated  
**Published:** Not stated

(a) A utility may disclose customer data to a contracted agent provided that the contract requires the agent to: (I) implement and maintain data security procedures and practices to protect the customer data from unauthorized access, destruction, use, modification, or disclosure that are equal to or

## Document text

(a) A utility may disclose customer data to a contracted agent provided that the
contract requires the agent to:
(I) implement and maintain data security procedures and practices to protect
the customer data from unauthorized access, destruction, use,
modification, or disclosure that are equal to or greater than the data
privacy and security policies and procedures used by the utility internally
to protect customer data;
(II) use customer data solely for the purpose of the contract and prohibits the
use of customer data for a secondary commercial purpose not related to
the purpose of the contract without first obtaining the customer’s consent
as provided for in these rules;
(III) return to the utility or destroy any customer data that is no longer
necessary for the purpose for which it was transferred; and
(IV) execute a non-disclosure agreement with the utility.
(b) The utility shall maintain records of the disclosure of customer data to contracted
agents for a minimum of three years. Such records shall include all contracts with
the contracted agent and executed non-disclosure agreements.

## Provenance

- Official: Yes
- Source: <https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4>
- Source ID: `co-sos-ccr`
- SHA-256: `296fe74a100e741d791eba6757cce4d854b000dbe50ed2fc84dfbeee3b266f4e`
- Retrieved: 2026-08-12T04:36:48.096Z
- Exported: 2026-08-24T03:39:48.666Z
- Document slug: `co-ccr-4-723-4-4030`

### Source metadata

```json
{
  "jurisdiction": "US-CO",
  "code": "4 CCR 723-4",
  "ruleKey": "4030",
  "pipelineScope": "colorado-jurisdictional-gas-utilities",
  "legalScope": "Current 4 CCR 723-4 rules regulating Colorado jurisdictional gas utilities and gas master-meter operators, including construction, operation, system safety, gas infrastructure planning, metering, service, and enforcement provisions. This is an adjacent gas-utility corpus, not a replacement for the repealed dedicated 4900-series pipeline-safety rules.",
  "applicabilityCaveat": "Part 4 applies according to Colorado Public Utilities Commission jurisdiction and each rule's scope. The former dedicated pipeline-safety rules 4900 through 4975 are reserved after repeal; this connector does not represent them as current. Part 4 does not replace federal pipeline-safety requirements, determine whether a facility is interstate or intrastate, or resolve operator-specific orders, waivers, tariffs, or later rulemaking.",
  "references": [],
  "ruleInfoUrl": "https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4",
  "pucRulesUrl": "https://puc.colorado.gov/gasrulesandregulations",
  "ruleVersionId": "12549",
  "editionEffectiveOn": "2026-06-14",
  "publicationStatus": "The Colorado Secretary of State identifies the source as the official publication of state administrative rules. The edition date applies to the compiled rule version and is not represented as the effective date of every provision.",
  "rights": "Official state rule text is preserved with attribution and source links. Public accessibility does not imply rights in agency marks, third-party material, or incorporated standards; commercial redistribution requires review.",
  "region": "CO"
}
```