Colorado’s informed consent law requires healthcare providers to give patients enough information about a proposed treatment — its nature, material risks, expected benefits, and reasonable alternatives, including doing nothing — for the patient to make a meaningful decision before agreeing. The rules come primarily from Title 13, Article 20 of the Colorado Revised Statutes and are enforced through malpractice lawsuits and Colorado Medical Board discipline. Violations can lead to civil damages, fines of up to $5,000 per violation, and license suspension or revocation.
What a Provider Has to Tell You
Before a procedure or treatment starts, a Colorado provider must share the nature of what is proposed, the expected benefits, the material risks and potential complications, and any reasonable alternatives. That information has to be delivered in language the patient can actually understand. Medical jargon does not count, and where a language barrier exists the provider must arrange interpreter services or translated materials.
The disclosure standard is not “whatever the doctor thinks is enough.” Colorado courts evaluate disclosure based on what a reasonable person in the patient’s position would need to know to make an informed decision. That framing shifts the focus from what doctors customarily say to what patients actually need to hear. A risk that sounds minor to a surgeon can be the deciding factor for someone whose livelihood depends on fine motor skills.
Providers do not have to disclose every conceivable risk. The requirement covers material risks: those that are reasonably foreseeable and significant enough to influence a patient’s decision. Risks approaching one-in-a-million odds, risks obvious to anyone, and risks that plainly would not change a patient’s mind generally fall outside the requirement.
When Someone Else Can Consent for You
Informed consent only works if the patient can process the information and make a choice. Providers assess decisional capacity at nearly every encounter, usually informally. A structured evaluation becomes necessary when something raises doubt, such as a sudden change in mental status, refusal of a clearly beneficial treatment, or quick agreement to a high-risk procedure without any questions.
Any treating physician can perform the capacity evaluation, and it looks at whether the patient can understand the situation, appreciate how it applies to them, reason through the options, and communicate a decision. Before deciding someone lacks capacity, the provider should rule out reversible causes like medication side effects, infection, delirium, or communication barriers. Capacity is decision-specific: a patient may lack it for a complex surgical choice while retaining it for simpler ones.
When a patient is found to lack capacity, a legally authorized representative must consent on the patient’s behalf. If the patient has a medical power of attorney or a court-appointed guardian, that person steps in. If not, Colorado’s statutes governing future health care decisions (C.R.S. § 15-18.5-101 et seq.) let the attending physician designate a proxy decision-maker.1Justia. Colorado Revised Statutes Title 15, Article 18.5, Section 15-18-5-103 The surrogate is expected to choose consistently with what the patient would have wanted, drawing on known preferences, values, or prior statements. The medical record should document the surrogate’s identity, relationship to the patient, and legal basis for authority.
When the Normal Consent Rules Bend
Colorado recognizes three narrow exceptions to the standard process.
Emergencies
When a patient faces an immediate threat to life or health and cannot communicate, and there is no time to locate a surrogate, providers can proceed without consent. The exception covers genuine emergencies where delay would cause serious harm or death, not situations where obtaining consent would merely be inconvenient. Even the specific consent requirement for intimate examinations is waived when the exam is “medically necessary for the life or well-being of the patient,” though the provider must document why consent was skipped and inform the patient before discharge.2Justia. Colorado Revised Statutes Title 12, Section 12-30-122
Therapeutic Privilege
A provider may withhold specific information in rare cases where disclosure would so severely harm the patient psychologically that they could not make a rational decision. Colorado courts treat this cautiously. It is not a license to avoid difficult conversations. A provider who invokes it should document the clinical reasoning and be prepared to defend it. Malpractice attorneys scrutinize any claim of therapeutic privilege aggressively, and courts tend to weigh it against the patient’s fundamental right to decide.
Patient Waiver
A patient can voluntarily decline to receive information and ask the provider to proceed. This sometimes happens when a patient trusts their physician and does not want to hear about risks that might cause anxiety. The provider should still confirm the waiver is voluntary and that the patient understands they have the right to full disclosure and are choosing to give it up. Without a documented waiver conversation, it would be hard to show later that the patient chose not to be informed rather than being denied information.
When Minors Can Consent on Their Own
Patients under 18 generally cannot consent to their own care in Colorado. A parent or legal guardian must consent. Several statutory exceptions let minors consent independently, mainly to protect access to sensitive care.
A minor age 12 or older can consent to outpatient psychotherapy without a parent’s permission, provided the mental health professional determines the minor is voluntarily seeking services and treatment is clinically necessary.3Justia. Colorado Revised Statutes Title 12, Section 12-245-203.5 – Minors – Consent for Outpatient Psychotherapy Services Minors of any age can request testing, treatment, and preventive care for sexually transmitted infections without parental consent or notification under C.R.S. § 25-4-409. A minor can consent to examination and treatment for drug use or a substance use disorder under C.R.S. § 13-22-102. C.R.S. § 13-22-103.5 lets pregnant minors consent to prenatal, delivery, and postpartum care related to the intended live birth of a child.
A minor who is 15 or older, living independently, and managing their own finances can consent to any medical, dental, or surgical care. The same applies to any minor who has entered a lawful marriage.4Justia. Colorado Revised Statutes Title 13, Section 13-22-103
Extra Rules for Intimate Exams Under Sedation
Colorado imposes heightened requirements for intimate examinations, meaning exams of the breasts, pelvic region, rectum, or prostate, performed on patients who are sedated or unconscious. Under C.R.S. § 12-30-122, the provider must obtain specific, written informed consent before the procedure, separate from any general surgical consent form.2Justia. Colorado Revised Statutes Title 12, Section 12-30-122
The consent document must carry a specific heading in bold 18-point type reading “CONSENT FOR EXAMINATION OF BREASTS, PELVIC REGION, RECTUM, AND/OR PROSTATE.” It must identify the nature and purpose of the exam, name the provider performing it, and state whether students or trainees will participate or observe. The patient must be able to separately consent to or decline the clinical exam, any educational exam by the provider, and up to three additional exams by students or trainees. Both the patient and the provider must sign. The only exception is a genuine emergency where the exam is medically necessary for the patient’s life or well-being, and even then the provider must document the reason and give the patient that documentation before discharge.
Telehealth Adds Its Own Consent Step
Colorado requires separate written consent for telehealth services. The consent must inform the patient of three things: that they can refuse telehealth at any time without losing access to treatment, that all applicable confidentiality protections apply, and that the patient has the right to access medical information generated during the telehealth encounter under state law.
These requirements sit on top of the standard informed consent obligations. A telehealth provider still has to disclose the same information about risks, benefits, and alternatives as during an in-person visit. The telehealth consent adds transparency about the medium itself and its limitations.
Language Access Is Part of Valid Consent
Consent means nothing if the patient cannot understand what is being said. Federal law requires any healthcare provider receiving federal funding to take reasonable steps to ensure patients with limited English proficiency can meaningfully access services, including the consent process. Under Section 1557 of the Affordable Care Act, providers must offer qualified interpreter services at no cost to the patient. Interpreters must demonstrate proficiency in both languages, use specialized medical vocabulary accurately, and maintain confidentiality.
Providers cannot require or suggest that patients use friends, family members, or minor children as interpreters. If a patient specifically declines free interpreter services and asks to use a family member, the provider may allow it only if doing so would not compromise accuracy or confidentiality, and only after documenting the offer and the patient’s refusal. Consent forms and other vital documents must be translated into languages regularly encountered in the provider’s patient population.
What Good Documentation Looks Like
A signed form alone does not prove informed consent happened. Colorado courts look for evidence of a genuine conversation: what information was shared, what questions the patient asked, what concerns they raised, and what decision they ultimately made. Providers should record all of that in the medical record rather than just filing a signed consent sheet. When a surrogate provides consent for an incapacitated patient, the record should include the surrogate’s name, their relationship to the patient, and the legal basis for their authority.
Electronic consent is valid. Under Colorado’s version of the Uniform Electronic Transactions Act, a record or signature cannot be denied legal effect solely because it is electronic, and an electronic signature satisfies any statutory signature requirement.5Justia. Colorado Revised Statutes Title 24, Section 24-71-3-107 Providers using tablet-based or digital forms should keep an audit trail showing when the document was sent, when it was signed, and by what device. HIPAA does not set a minimum retention period, but it does require appropriate safeguards for patient information for as long as records are maintained, including at disposal.6HHS.gov. Does the HIPAA Privacy Rule Require Covered Entities to Keep Patients Medical Records for Any Period of Time Consent documentation should be treated as part of the permanent medical record.
What Violations Can Cost
Consequences fall into two tracks: civil liability and professional discipline.
Civil Liability
A patient harmed by a procedure they were not adequately informed about can sue for medical malpractice. To win, the patient generally must show that the provider failed to disclose a material risk, that a reasonable person would have refused the treatment if told about it, and that the undisclosed risk actually materialized and caused harm. Damages can include medical expenses, lost income, and pain and suffering. Colorado caps noneconomic damages in medical malpractice cases, though the legislature raised the cap effective January 2025.
Before filing suit, the plaintiff’s attorney must file a certificate of review within 60 days of serving the complaint. The certificate declares that the attorney consulted a qualified expert, that the expert reviewed the relevant facts and records, and that the claim has substantial justification.7Justia. Colorado Revised Statutes Title 13, Section 13-20-602 Failing to file it results in automatic dismissal.
Professional Discipline
The Colorado Medical Board can investigate providers who fail to meet consent standards. Under C.R.S. § 12-240-125, if a hearings panel finds the charges proven, it can impose a letter of admonition, suspension for a definite or indefinite period, or revocation of the provider’s license, and can fine the provider up to $5,000 per violation.8Justia. Colorado Revised Statutes Title 12, Section 12-240-125 Additional conditions may include mandatory continuing education, supervised practice, or restrictions on the types of procedures the provider can perform. These outcomes are public.
Deadline to Sue Over Lack of Consent
Colorado’s statute of limitations for medical malpractice, including claims based on lack of informed consent, is two years from the date the patient was injured. If the injury was not immediately discoverable, the two-year clock runs from the date the patient should have discovered the problem through reasonable diligence, under C.R.S. § 13-80-102.5. Regardless of discovery, Colorado imposes a hard three-year statute of repose measured from the date of the provider’s error or failure to act. After three years, the claim is barred even if the patient had no way to know sooner.
These deadlines are unforgiving. Missing them by a day means dismissal, no matter how strong the underlying claim. Anyone who suspects they were not properly informed before a medical procedure should consult an attorney well before the two-year mark to allow time to obtain records, retain an expert, and prepare the required certificate of review.