Colorado Attorney General's Office Issues Draft Colorado Privacy Act Regulations

On September 30, 2022, the Colorado Attorney General's Office (the AG's Office) released draft regulations to the Colorado Privacy Act (the CPA). Before these proposed regulations take effect, however, there will be a lengthy public comment period, which will run from October 10, 2022, through February 1, 2023. On February 1, 2023, the AG's Office will hold a public hearing on the proposed regulations and then take the public comments under advisement. In short, we are still several months away from having finalized regulations under the CPA, which goes into effect on July 1, 2023.

The good news for businesses is that the draft regulations (1) are mostly consistent with the proposed California Consumer Privacy Act (the CCPA) regulations and (2) do not contain too many new obligations beyond the plain language of the CPA itself. This will hopefully ease the compliance burden for companies that are plotting out a multistate approach.