On May 12, 2013, Colorado’s governor signed H.B. 1046 into law to forbid employers from requiring or requesting that prospective and current employees disclose their username and password to their personal social media accounts. Several other states have codified similar laws, including Maryland, Illinois, California, Michigan, Utah, New Mexico (which ostensibly applies to prospective employees only), and Arkansas. A number of other states and the U.S. Congress have introduced such legislation. To understand the new Colorado law, this alert discusses its coverage, prohibitions, exceptions, and remedies.