I know of someone recently got their card, took 7 weeks.
For what it's worth,
pp69
If you don't have your card back in 35 days, you are considered approved. It's part of the constitution of the great state of CO:
(d) Except for patients applying pursuant to subsection (6) of this section, where the state health agency, within thirty-five days of receipt of an application, fails to issue a registry identification card or fails to issue verbal or written notice of denial of such application, the patient's application for such card will be deemed to have been approved. Receipt shall be deemed to have occurred upon delivery to the state health agency, or deposit in the United States mails