Whistleblower Protections in Colorado: Know Your Rights

Federal whistleblower protections exist across multiple statutes depending on the industry and type of violation reported. The Occupational Safety and Health Act (OSHA), 29 U.S.C. § 211, protects employees who report workplace safety violations to OSHA or their employer, covering all private sector employers with one or more employees. Title VII of the Civil Rights Act, 42 U.S.C. § 2000e, prohibits retaliation against employees who file discrimination charges or participate in equal employment opportunity investigations. The False Claims Act, 31 U.S.C. § 3730, protects employees who report government contract fraud, including through qui tam lawsuits. The Dodd-Frank Act, 15 U.S.C. § 78u-6(h), protects securities whistleblowers and provides monetary awards.

The Sarbanes-Oxley Act, 18 U.S.C. § 806, protects employees of publicly traded companies who report fraud or violations of federal laws. The National Labor Relations Act, 29 U.S.C. § 151 et seq., protects union and non-union employees engaging in protected concerted activity, including reporting workplace violations. Federally, the EEOC and OSHA enforce these protections. Employees typically must file federal complaints within 180 to 300 days, depending on the statute and whether the state has a deferral agency. Federal law provides remedies including reinstatement, back pay, front pay, compensatory damages, and punitive damages in some cases.

Colorado's whistleblower protections are codified primarily in Colorado Revised Statutes § 8-1-101 et seq. (the Whistleblowers' Rights Act) and § 24-50.5-101 et seq. (protections for public employees). Colorado law is significantly stronger than federal baseline protections in several ways. First, it covers a broader scope of reportable conduct: employees can report any violation of "any federal, state, or local law, statute, ordinance, or regulation," not just occupational safety or fraud. Second, Colorado protects both internal complaints (reporting to management or internal compliance channels) and external complaints (to government agencies, law enforcement, or the public), whereas federal law generally requires reporting to specific agencies.

Under C.R.S. § 8-1-101, employers cannot discharge, threaten, discriminate, or retaliate against employees who report violations of law to their employer or to a government agency. The statute applies to both private and public sector employees in Colorado. Notably, Colorado does not require the employee to prove the violation actually occurred—only that the employee made a good-faith report of a suspected violation. This is broader than federal standards, which often require proof of an actual violation or at minimum a reasonable belief in the violation.

Colorado's law also protects employees who refuse to participate in illegal conduct. An employer cannot retaliate against an employee who refuses to perform an act that violates law. Additionally, C.R.S. § 24-2-123 provides separate anti-retaliation protections for state employees who report ethical violations to the Inspector General or relevant agencies. For workers' compensation contexts, C.R.S. § 8-2-127 protects employees reporting workplace injuries or violations of workers' compensation laws.

Remedies under Colorado law include reinstatement to the same or an equivalent position, back pay with interest, restoration of benefits, and compensatory damages for mental anguish, emotional distress, or damage to reputation. Punitive damages are available if the employer's conduct was willful and wanton. Colorado law also covers legal fees and court costs in successful cases. The state applies at-will employment doctrine but carved out whistleblower retaliation as a major exception, meaning employers cannot use at-will employment as a defense to justify retaliation for protected whistleblowing activity.

Colorado whistleblower law contains several important exceptions and limitations. First, the protection applies only to good-faith reports of violations of law; false or reckless reports made with knowledge of their falsity are not protected. An employee claiming whistleblower retaliation must prove the report was made in good faith based on reasonable belief in the violation. Second, the law does not protect reporting of conduct that is merely unethical or policy violations if no law is violated; it requires violation of "any federal, state, or local law, statute, ordinance, or regulation."

Third, at-will employment is a partial defense in limited circumstances: if an employer can show it would have taken the same action regardless of the whistleblowing (the "would have" defense), it may reduce liability, though full retaliation is still prohibited. However, Colorado courts apply this narrowly in whistleblower cases. Fourth, confidentiality agreements and non-disclosure agreements cannot legally prevent whistleblowing to government agencies or law enforcement, though they may apply to public disclosure in some contexts; the Colorado Supreme Court has recognized public policy exceptions to NDAs in whistleblower contexts.

Fifth, the law does not protect reporting of purely private matters unrelated to law violations—for example, reporting a manager's personal behavior that does not constitute unlawful discrimination or harassment. Sixth, employees on union contracts or covered by collective bargaining agreements may have additional or different remedial procedures through grievance arbitration, which must be exhausted in some contexts. Seventh, contractors and temporary workers sometimes fall outside scope if they are genuinely independent contractors rather than employees; the economic reality test applies. Eighth, there is no protection for disclosures that violate attorney-client privilege, physician-patient privilege, or other legally protected confidences, though this is construed narrowly.

Step 1 — Document Everything: Keep detailed records of the illegal conduct or violation you witnessed. Document dates, times, individuals involved, what was said or done, and how it violated law. Save emails, text messages, memos, policies, or other evidence. Create a personal log outside company systems (personal email, personal devices, or paper copies at home) to preserve evidence in case your computer access is revoked. Take screenshots of digital records. Maintain copies of performance reviews, pay stubs, and communications showing no prior performance issues before you report, to establish your report as the retaliatory trigger.

Step 2 — Report Internally First (Recommended but Not Required): Colorado law protects both internal and external reports, but reporting internally first often strengthens your legal position and gives the employer an opportunity to correct the violation. Identify the appropriate internal channel: human resources, compliance officer, direct manager (if not the subject of the violation), ethics hotline, or senior management. Make your report in writing when possible (email is ideal as it creates documentation). State clearly and specifically what law is being violated, by whom, and when. Describe the illegal conduct factually without emotional language. Request written confirmation of receipt. Keep copies of all internal communications. If your company has a whistleblower policy or code of conduct, follow it exactly.

Step 3 — File with Colorado Department of Labor and Employment (CDLE): If internal reporting fails to stop the violation or if you face retaliation, file a formal complaint with the Colorado Department of Labor and Employment, Division of Labor. You have 90 days from the retaliatory action to file. Visit cdle.colorado.gov or call (303) 318-8047. Complete the whistleblower complaint form (available on the CDLE website). Include: your name and contact information, employer name and address, description of the protected activity (what you reported), description of the retaliation you experienced, dates of the report and retaliatory action, names and contact information of witnesses, and copies of all documentation (internal reports, emails, performance reviews, termination letters). Submit by mail to Colorado Department of Labor and Employment, 633 17th Street, Suite 700, Denver, CO 80202, or electronically through the CDLE portal.

Step 4 — Understand the CDLE Investigation Process: After filing, the CDLE issues a charge to investigate. The investigation typically takes 30 to 90 days, though it can extend longer for complex cases. CDLE investigators will contact your employer for their response. They may request additional documents, interview witnesses, and review personnel files. You will receive updates on investigation status; respond promptly to CDLE requests. The investigator will determine if there is reasonable cause to believe retaliation occurred. If CDLE finds reasonable cause, it can issue an order requiring the employer to cease retaliation, reinstate you, or pay back wages. If the employer does not comply, CDLE can refer the case for litigation or the employee can pursue civil suit. If CDLE does not find reasonable cause, you may still pursue claims in court within the statute of limitations.

Step 5 — Consult an Employment Attorney: Contact an employment law attorney experienced in whistleblower cases before or immediately after filing with CDLE. An attorney can review whether your specific situation qualifies for protection, advise on the strength of your claims, ensure deadlines are met, and represent you in investigation or litigation. Many employment attorneys work on contingency in whistleblower cases (you pay only if you win). This is especially important if you have been fired, demoted, or significantly harassed. An attorney can also advise on whether to pursue federal claims (OSHA, False Claims Act, etc.) in addition to state claims, which may offer stronger remedies or longer timeframes. If your employer is retaliating after you file, notify your attorney immediately, as continued retaliation strengthens your case.