C.R.S. § 24-72-501

As used in this part 5, unless the context otherwise requires: (1) “Governmental entity” means the state and any state department, agency, or institution of the state. (2) “Personally identifiable information” means information about an individual collected by a governmental entity that could reasonably be used to identify such individual, including, but not limited to, first and last name, residence or other physical address, electronic mail address, telephone number, birth date, credit card information, and social security number. Notwithstanding any provision to the contrary, “personally identifiable information” shall not include information collected in furtherance of any regulatory, investigative, or criminal justice purpose, information collected in furtherance of litigation in which the state is a party, or information that is required to be collected pursuant to any state or federal statute or regulation.