C.R.S. § 35-77-109

(1) Unless authorized by law, it is unlawful for any person to: (a) Refuse to comply with a cease-and-desist order issued under section 35-77-108 ; or (b) Make a material misstatement in a registration or to the commissioner or the department during an official investigation. (2) It is unlawful for an employee, official of the department, or person designated by the commissioner to: (a) Use for private advantage any information derived from reports or records submitted to the department in accordance with this article 77; (b) Disclose any information derived from reports or records submitted to the department in accordance with this article 77; except that the information may be disclosed to: (I) A court of this or other states; or (II) People who are authorized to receive the information, reports, or records.