Colorado Privacy Act Continues Countdown To 2023 Effective Date

Colorado Attorney General Philip Weiser issued remarks on Data Privacy Day in January discussing his office's plans for implementing the Colorado Privacy Act (CPA), as well as best practices for companies to comply with data security requirements. Though the remarks did not provide much detail regarding topics to be tackled in the rulemaking process, they did suggest that Weiser's office will be focused on enforcement of the CPA's provisions and other Colorado laws requiring businesses to take reasonable measures to secure personal information.

CPA Rulemaking

In his remarks, Weiser outlined that the process to issue rules under the CPA – which was passed in July 2021 and goes into effect in July 2023 – will involve separate stages of feedback from Colorado consumers and businesses before the formal rules are drafted. A formal Notice of Proposed Rulemaking is anticipated by this fall with final rules expected to be adopted in early 2023. Weiser did not preview the