Colorado Privacy Act Signed Into Law

On July 7, 2021, Governor Jared Polis officially signed the Colorado Privacy Act ("CPA") into law, after the bill had passed both the Colorado House and Senate in June.  The effective date of the CPA is July 1, 2023.

The CPA applies to organizations that conduct business in Colorado or produce commercial products or services that are intentionally targeted to Colorado residents and that either 1) control or process the personal data of more than 100,000 consumers per calendar year; or 2) derive revenue from the sale of personal data and control or process the personal data of 25,000 consumers.

Like similar laws, the CPA grants certain rights to consumers (subject to limited exceptions), which currently include: