Mike has run his shop on South Broadway, Denver, for eleven years. Two bays, three full-time techs, the standard mix of Washington Park / Platt Park neighborhood customers and the occasional pickup from a Park Hill contractor. Mike does not have a Colorado state license to display because Colorado does not license auto repair shops at the state level. What Mike has is the obligation, under the Colorado Motor Vehicle Repair Act (CO MVRA) and the corresponding consumer-protection enforcement framework, to follow specific written-estimate and authorization procedures on every repair where the cost will exceed $100.

Colorado's framework is enforced through two parallel paths: the Colorado Attorney General's Consumer Protection Section and the local District Attorney's office for the county where the repair occurred. Both have authority to investigate, bring civil enforcement actions, seek civil penalties, and pursue restitution. The dual-track enforcement structure is unusual — most state consumer-protection statutes consolidate enforcement in the AG. Colorado's approach gives consumers the option to file with whichever office they perceive as more responsive (which, in Denver, is often the Denver District Attorney's Consumer Affairs Division).

What the CO MVRA actually requires

The Colorado Motor Vehicle Repair Act and the related consumer-protection regulations require:

  • Written estimate before any work begins for any repair expected to exceed $100. The estimate includes a breakdown of labor charges, parts costs, and any additional fees. Customer signature with date.
  • Documented additional-work authorization above 10%. If actual costs will exceed the estimate by more than 10%, the shop obtains additional authorization from the customer in writing or by recorded electronic message before proceeding.
  • Itemized invoice on completion. Parts (with new/rebuilt/used designation), labor itemized by job, total. Customer signature acknowledging receipt and condition.
  • Records retention for the period specified by AG/DA regulation.
  • Compliance with the Colorado Consumer Protection Act (CCPA, C.R.S. §6-1-101 et seq.), which provides for civil penalties of up to $20,000 per violation and a private right of action with treble damages and attorney fees in cases involving "bad faith" conduct.

What dual-track enforcement looks like

Mike's case begins with a customer complaint filed with the Colorado AG's Consumer Protection Section. The complaint involves a $560 brake-and-rotor job from August 2025 where Mike's verbal quote was $410 and the final cost was $560 — a 37% increase over the original quote without documented additional-work authorization. The AG's Section reviews. The Section opens an investigation. The Section sends Mike an inquiry letter requesting documentation.

The same customer, frustrated by the pace of the AG's review, also contacts the Denver County District Attorney's Consumer Affairs Division. The DA's office opens its own parallel investigation. Both offices send Mike inquiry letters in the same week. Mike's response to one office does not satisfy the other; each office conducts its own review and reaches its own settlement decision.

The AG's Section offers an Assurance of Voluntary Compliance: corrective procedures, $1,800 civil penalty, refund of $150 to the customer (the over-charge above 10%). Mike accepts. Two weeks later, the DA's office offers a separate Voluntary Compliance Agreement: parallel corrective procedures, $1,200 civil penalty paid to the County, mutual waiver. Mike accepts that too. Both settlements are public. The customer has been refunded $150 once (the AG settlement covers it; the DA settlement does not duplicate the refund). Mike has paid $3,000 in combined civil penalties for one underlying transaction.

Three weeks after the DA settlement, the customer's attorney sends Mike a separate CCPA private-action demand under C.R.S. §6-1-113 seeking actual damages of $150, plus treble damages of $450 (the customer alleges Mike's conduct was "in bad faith"), plus attorney fees of $3,200. Mike settles for $2,200. Total cost across all three settlements: approximately $5,200, plus Mike's own legal fees of approximately $3,400 across the dual-track defense, for a grand total of approximately $8,600 on a $560 invoice.

The five lines every Colorado auto repair invoice should print

1. Written estimate above the $100 threshold — customer-signed before any work begins

Required by CO MVRA. Itemized parts (with new/rebuilt/used designation), parts unit prices, labor hours, hourly rate, total estimated cost, customer signature with date.

2. Additional-work authorization documented in writing above 10%

Required by CO MVRA. Date, time, name of the person consenting (customer of record), additional dollar amount, brief description.

3. Itemized invoice on completion with parts designations

Each part listed individually with new/rebuilt/used designation, unit price, labor itemized by job (hours and hourly rate), parts subtotal, labor subtotal, applicable Colorado sales tax (Colorado has state + local sales tax that varies by county and city; Denver City and County is currently around 8.81% combined for repair services), total.

4. Customer-acknowledgment line on the final invoice

"I, [customer name], have inspected the work performed and acknowledge that the vehicle is in the condition described above." Date. Signature.

5. Records retention organized by customer name and date for at least three years

Both the AG's and the DA's investigations can request documentation going back several years. Records that are accessible within sixty seconds of a request are records that the shop can rely on in defense. Records in cardboard boxes are records that produce after twenty minutes of searching, which the investigator interprets as evidence of inadequate compliance.

Why dual-track enforcement raises the stakes in Colorado

The parallel AG/DA enforcement structure means that a Colorado shop facing a single customer complaint may end up defending two separate investigations and paying two separate civil-penalty settlements. The settlements are both public, so the reputational impact is doubled. The CCPA private-action backstop runs on top of both settlements. Total exposure on a single underlying transaction can substantially exceed the exposure that the same transaction would create in a single-enforcement-track state.

Mekavo automatically prints the written estimate with itemized parts and labor and customer signature, the additional-work authorization log with date and dollar amount, the CO MVRA-defensible itemized invoice with parts designations, and the customer-acknowledgment line on the final invoice. The records-retention archive is accessible by customer name and date for the full statutory window. When both the AG and the DA send inquiry letters in the same week, the documentation already exists for both responses.

Official resources

Last updated: April 2026. Statutes cited were current at the time of publication. The dual-track AG/DA enforcement structure means outcomes can vary by which office takes the lead and by the negotiating posture of each. For a specific case — an AG inquiry letter, a DA Consumer Affairs Division contact, a CCPA private demand letter — consult a Colorado attorney experienced in consumer-protection defense before responding.

Note on scenarios: The shops, names, addresses, and case reference numbers in this article are fictional and used solely to illustrate how the cited statutes operate in practice. Any resemblance to actual shops, owners, or events is coincidental. The statutes, regulations, and agency procedures cited are real and current as of publication.