Summer Is Here And Data Privacy Is Heatin' Up

We kicked off 2023 with the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection Act (VCDPA) taking effect. As we move into Summer, businesses should be preparing for more comprehensive data privacy laws to take effect. On July 1, 2023, both the Colorado Privacy Act (ColoPA) and Connecticut Data Privacy Act (CTDPA) will become effective and enforceable, and the CPRA will become enforceable by the California Privacy Protection Agency and California Attorney General. Then, to round out the year, the Utah Consumer Privacy Act (UCPA) will become effective and enforceable on December 31, 2023.

A violation of the ColoPA can result in a $20,000 penalty, which can increase to $50,000 for violations against a person over 60 years old. For the CTDPA, penalties can reach $5,000 per violation. Because of these potentially steep penalties for non-compliance, businesses should ensure they are prepared for the additional regulation and enforcement that