Colorado’s recently passed privacy act, the Colorado Privacy Act (CPA), is scheduled to take effect on July 1, 2023, if signed into law by Governor Jared Polis. While the CPA is a comprehensive privacy act which provides certain rights to consumers regarding their personal data, it does not include a private right of action. It also imparts significant privacy rulemaking authority to Attorney General Phil Weiser. AG Weiser has long been outspoken about the need for a comprehensive state law, with the goal of building consumer confidence in data protection. With this legislation, he will wield the ability to flesh out consumer privacy protections for consumers. Read more on Colorado’s new privacy law in our Client Alert.
For more information on the state AG’s views on data privacy, please reference our interview from late 2020.