Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 12 JULY 2021

Colorado Privacy Act Becomes The Third Comprehensive State Privacy Law

Davis+Gilbert LLP
Davis+Gilbert LLP
Contributor
Davis+Gilbert LLP

Davis+Gilbert LLP

Legal mastery is critical but not enough. Even the best legal strategies must work in tandem with...

View firm profile
Explore more from Davis+Gilbert LLP

After passing through the Colorado General Assembly, Governor Jared Polis signed the Colorado Privacy Act (CPA) into law on July 7, 2021. Colorado is now the third state in the country...

United StatesPrivacy
Gary Kibel
Gary Kibel
Zachary Klein
Zachary Klein
Author LinkedIn connections

After passing through the Colorado General Assembly, Governor Jared Polis signed the Colorado Privacy Act (CPA) into law on July 7, 2021. Colorado is now the third state in the country — following California and Virginia — to pass comprehensive privacy legislation. Companies that are subject to the CPA will have to comply beginning July 1, 2023, the date when the new law goes into effect.

Details of the CPA

The CPA adopts the “controller-processor” framework found in the European General Data Protection Regulation (GDPR). The bulk of the CPA's obligations will apply to controllers that conduct business in Colorado or produce products or services that are targeted to Colorado residents, and that control or process the personal data of at least:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California Signs Landmark Online Child Safety Package

California has enacted the nation's most comprehensive online child safety legislation, banning addictive social media features for minors under 16, establishing strict companion chatbot regulations, and imposing enhanced civil penalties for platforms that harm children. Companies operating social media platforms or chatbots accessible to California children must now assess their products, audit features, and prepare compliance programs ahead of the laws' effective dates.
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Becomes Second State To Require Disclosure Of Synthetic Performers In Advertising

California joins New York in mandating disclosure when AI-generated synthetic performers appear prominently in advertisements, establishing specific language requirements and broad enforcement mechanisms. The law creates new compliance obligations for advertisers, agencies, and media platforms while introducing nuanced differences from New York's framework. With the January 2027 effective date approaching, businesses must implement tracking systems and disclosure procedures to navigate this expanding regula
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

EU AI Act Guidance Expands AI Disclosure Rules For Advertisers And PR Teams

The European Union's AI Act introduces sweeping transparency requirements for AI-generated content, fundamentally redefining what constitutes a "deep fake" and imposing disclosure obligations that extend far beyond traditional understanding. With enforcement beginning August 2, 2026, companies using AI to create advertising, marketing materials, or public communications must navigate complex compliance requirements that may apply even to organizations with no physical presence in Europe.
European UnionMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

NYC’s “Click To Cancel” Rule Is Now In Effect: What Subscription Businesses Need To Know

New York City has become the first U.S. municipality to enforce its own subscription cancellation requirements, creating a new compliance layer for businesses with NYC subscribers. The rule prohibits unreasonable barriers to cancellation and requires companies that enroll consumers in person to offer online cancellation options. With complaint-driven enforcement, per-violation fines up to $3,500, and restitution measured from the first cancellation attempt, businesses must now navigate city-level regulation
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

FTC Continues Crackdown On Subscription Businesses

The Federal Trade Commission has filed a sweeping complaint against Genesis Tech and related entities, alleging systematic deception in subscription funnels that lure consumers with free or low-cost offers while obscuring auto-renewal terms. The enforcement action signals heightened scrutiny of end-to-end consumer journeys, challenging not just missing disclosures but the overall impression created by quizzes, personalization claims, and pricing language that suggests one-time purchases. What compliance ris
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

The Pied-à-Terre Tax: New York City’s Newly Enacted Tax On High-Value Non-Primary Residences

New York has enacted an annual "pied-à-terre tax" on high-value New York City non-primary residences, effective July 2026, that could impose significant tax burdens on owners of luxury second homes. The tax applies to properties valued above certain thresholds, with rates varying by property type and value, and extends to properties held through trusts, LLCs, and other business entities. Property owners must understand exemption criteria and prepare documentation to challenge assessments before the Dep
United StatesTax
Davis+Gilbert LLP
Davis+Gilbert LLP