# Local Government Access to Customer Data from a Utility for Audit

**Citation:** 4 CCR 723-4 Rule 4031  
**Type / status:** regulation / current  
**Agency:** Colorado Public Utilities Commission  
**Effective:** Not stated  
**Published:** Not stated

(a) A utility may disclose customer data to a local government either with an audit required to be provided pursuant to a final Commission decision (e.g., a decision approving a franchise agreement) or as reasonably necessary for an audit conducted by a governmental entity of franchise fees paid to 

## Document text

(a) A utility may disclose customer data to a local government either with an audit
required to be provided pursuant to a final Commission decision (e.g., a decision
approving a franchise agreement) or as reasonably necessary for an audit
conducted by a governmental entity of franchise fees paid to them by the utility,
provided that:
(I) disclosure is not otherwise prohibited by a final Commission decision (e.g.,
Commission-approved franchise between the utility and the local
government);
(II) disclosure is made to a designated auditor or auditor’s office, who is either
an employee or agent of the local government;
(III) the auditor collects and uses the customer data solely for the purpose of
reviewing or conducting the audit and is prohibited from disclosing or
using the customer data for a purpose not related to the audit;
(IV) the local government implements and maintains data security procedures
and practices to protect the customer data from unauthorized access,
destruction, use, or modification;
(V) the local government destroys or returns to the utility of any customer data
no longer necessary for the purpose for which it was transferred unless
state law or the municipality’s state-mandated retention schedule requires
otherwise;
(VI) the local government agrees not to permit access to the data by anyone
that has not agreed to abide by the terms pursuant to which the data was
provided by the utility. This includes, but is not limited to, all interns,
subcontractors, staff, other workforce members, and consultants;
(VII) the local government agrees that any recipient of the data pursuant to this
rule does not obtain any right, title or interest in any of the data provided
by the utility;
(VIII) governing law or a non-disclosure agreement executed with the utility
requires that the local government, at a minimum, comply with the
requirements of this rule; and
(IX) the data requested is for utility customers served in the boundaries of the
local government.
(b) The utility shall maintain records of all disclosures of customer data to local
government requestors for a minimum of three years.

(c) Availability of customer data pursuant to this rule does not preclude a local
government from requesting other data reports.

## Provenance

- Official: Yes
- Source: <https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4>
- Source ID: `co-sos-ccr`
- SHA-256: `76c38e59ed2c95f39cb9502a2bfc85b789cb2d1c350b3698ec215add444a06ec`
- Retrieved: 2026-08-12T04:36:48.096Z
- Exported: 2026-08-24T08:00:02.938Z
- Document slug: `co-ccr-4-723-4-4031`

### Source metadata

```json
{
  "jurisdiction": "US-CO",
  "code": "4 CCR 723-4",
  "ruleKey": "4031",
  "pipelineScope": "colorado-jurisdictional-gas-utilities",
  "legalScope": "Current 4 CCR 723-4 rules regulating Colorado jurisdictional gas utilities and gas master-meter operators, including construction, operation, system safety, gas infrastructure planning, metering, service, and enforcement provisions. This is an adjacent gas-utility corpus, not a replacement for the repealed dedicated 4900-series pipeline-safety rules.",
  "applicabilityCaveat": "Part 4 applies according to Colorado Public Utilities Commission jurisdiction and each rule's scope. The former dedicated pipeline-safety rules 4900 through 4975 are reserved after repeal; this connector does not represent them as current. Part 4 does not replace federal pipeline-safety requirements, determine whether a facility is interstate or intrastate, or resolve operator-specific orders, waivers, tariffs, or later rulemaking.",
  "references": [],
  "ruleInfoUrl": "https://www.sos.state.co.us/CCR/DisplayRule.do?action=ruleinfo&ruleId=2260&deptID=18&agencyID=96&deptName=Department%20of%20Regulatory%20Agencies&agencyName=Public%20Utilities%20Commission&seriesNum=4%20CCR%20723-4",
  "pucRulesUrl": "https://puc.colorado.gov/gasrulesandregulations",
  "ruleVersionId": "12549",
  "editionEffectiveOn": "2026-06-14",
  "publicationStatus": "The Colorado Secretary of State identifies the source as the official publication of state administrative rules. The edition date applies to the compiled rule version and is not represented as the effective date of every provision.",
  "rights": "Official state rule text is preserved with attribution and source links. Public accessibility does not imply rights in agency marks, third-party material, or incorporated standards; commercial redistribution requires review.",
  "region": "CO"
}
```