Colorado has made buying and selling legal leads illegal.
Senate Bill 26-174, titled “Prohibit Lead Generation Legal Marketing,” was signed by Governor Jared Polis on June 3, 2026 and took effect on August 12, 2026. It adds a new section to the Colorado Consumer Protection Act and treats legal lead generation as a deceptive trade practice.
This is the second state to do it. California passed its own version, SB 37, earlier in the cycle. Colorado went further by adding criminal exposure and a per-violation penalty on top.
What the law prohibits
The statute defines “lead generation legal marketing” as an arrangement where a lawyer, law firm, or licensed legal paraprofessional pays a third party for information about a potential client or case — contact details, case details, or both.
Three things are now banned:
- Paying money or other compensation for lead generation legal marketing services
- Engaging in the practice of lead generation legal marketing
- Selling leads to an attorney, law firm, or licensed legal paraprofessional
Note the first one. The law puts liability on the buyer, not just the seller. A firm that purchases leads is exposed, and so is the vendor that sold them.
It also applies to every practice area. Personal injury and mass tort are the obvious targets, but employment, bankruptcy, immigration, family law, criminal defense, and estate planning all fall under the same rule.
What is still allowed
Traditional legal advertising survives. SEO, paid search, social ads, radio, TV, streaming, billboards, and legal directories are all fine — as long as the attorney or firm behind the ad is clearly identified to the consumer.
The statute carves out three permitted categories. You can solicit or market for legal services in Colorado if you are:
- Authorized by the Colorado Supreme Court to practice law in the state
- Working on behalf of someone who is, and that attorney, firm, or business is clearly identified in the advertising and marketing materials
- A nonprofit organization that provides legal services in the state
Category two is the one that matters for agencies. A law firm can absolutely hire an outside marketing company to run its campaigns. What it cannot do is pay a broker for a stranger’s phone number.
The penalties
Because the conduct is now a deceptive trade practice, the full weight of the Colorado Consumer Protection Act applies:
- Civil penalties up to $20,000 per violation, rising to $50,000 when the target is an elderly consumer
- A private right of action with $10,000 in statutory damages per violation, plus attorney’s fees and costs
- Criminal exposure layered on top of the civil penalties
The private right of action is the part that changes the math. Enforcement does not depend on the Attorney General or a district attorney deciding to prioritize the issue. Any Colorado resident targeted by a violation can sue, and so can competitors harmed by it.
What it means in practice
You cannot fix this with a disclaimer. The law restricts the business model itself, not the wording of the ad. Unbranded landing pages, shared lead pools, and ping-post routing to a panel of undisclosed buyers do not have a compliant version in Colorado.
The compliant direction is straightforward, if not easy: name the firm, keep the consumer’s information flowing to that named firm, and pay vendors for services and media rather than per lead.
If you are generating or buying legal leads with any Colorado exposure, this is a structural change and not a paperwork one. Two of the largest legal markets in the country have now closed the door within a year of each other, and other states are watching.
This article is general information, not legal advice. If your firm buys or sells legal leads, take the statute to your own counsel for a formal opinion on how it applies to your campaigns.
Back to Blog