Colorado Passes Privacy Act
The Colorado Legislature recently strengthened personal data privacy rights with the passing of the Colorado Privacy Act (Bill SB21-190), becoming just the third U.S. state to recently modernize its privacy regulation in a manner similar to the EU’s General Data Protection Regulation (GDPR). The bill seeks to meet the changing needs for data protection due to technological advances. Consumers are given the ability to opt-out of having businesses process and share their personal information. The bill requires companies to ensure they are protecting personal data through performing assessments of their processing activities and ensuring customers have consented to data collection. The Attorney General and district attorneys have the authority to enforce this bill. It is expected to go into effect in July of 2023.