Progress

Current status
in force
01 Jul 2024 in force
01 Jul 2023 in force
15 Mar 2023 in grace period
23 Feb 2023 adopted
01 Feb 2023 processing consultation
21 Dec 2022 in consultation
10 Oct 2022 in consultation
29 Sep 2022 under deliberation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
central government
other regulatory body
Implementation Level
subnational

Timeline of events

01 Jul 2024
in force

Implemented opt-out mechanism and consent requirements in Colorado Privacy Act Rules

On 1 July 2024, the requirements regarding opt-out mechanisms and consent requirements under the Colorado Privacy Act Rules are implemented. Specifically, processors are required to respect opt-out requests received through Universal Opt-Out Mechani…

Source
Event type order
Action type implementation
Government branch executive
Government body central government
01 Jul 2023
in force

Implemented Colorado Privacy Act Rules

On 1 July 2023, the Colorado Privacy Act Rules are implemented. The rules generally specify how rights and procedures under the Act are appropriately carried out. Notably, the Rules introduce updates to several definitions under the Act, including t…

Source
Event type order
Action type implementation
Government branch executive
Government body central government
15 Mar 2023
in grace period

Entry into force with grace period Colorado Privacy Act Rules

On 15 March 2023, the Colorado Privacy Act Rules were finalised by filing with the Secretary of State. The final rules will be published in the Colorado Register in March 2023, coming into effect on 1 July 2023. The rules generally specify how right…

Source
Event type order
Action type in force with grace period
Government branch executive
Government body central government
23 Feb 2023
adopted

Adopted Colorado Privacy Act Rules

On 23 February 2023, the Colorado Privacy Act rules were adopted. Notably, the rules introduce updates to a number of definitions under the Act, including of the right to opt-out, the right of action, the right to correction, the right to deletion, …

Source
Event type order
Action type adoption
Government branch executive
Government body central government
01 Feb 2023
processing consultation

Closed consultation on revised draft of Consumer Protection Section in Colorado Privacy Act Rules

On 1 February 2022, the public consultation closes on the revised draft of the Colorado Privacy Act Rules. The stakeholders were invited to submit comments and provide additional information on the five revised sections of the Rules concerning consu…

Source
Event type order
Action type consultation closed
Government branch executive
Government body central government
21 Dec 2022
in consultation

Opened consultation on revised draft of Consumer Protection Section in Colorado Privacy Act Rules

On 21 December 2022, the Colorado Attorney General (AG) opened the public consultation on the revised draft of the Colorado Privacy Act Rules until 1 February 2023. The new draft contains updated provisions following the comments received from the p…

Source
Event type order
Action type consultation opened
Government branch executive
Government body central government
10 Oct 2022
in consultation

Opened consultation on Consumer Protection Section in Colorado Privacy Act Rules

On 10 October 2022, the Colorado Attorney General’s Office opened a consultation on the draft rules for the Consumer Protection Section under the draft Colorado Privacy Act Rules. Firstly, the draft provides definitions for personal data, including …

Source
Event type order
Action type consultation opened
Government branch executive
Government body central government
29 Sep 2022
under deliberation

Issued draft Rules implementing the Colorado Privacy Act

On 29 September 2022, the Colorado Attorney General's Office issued the draft Rules implementing the Colorado Privacy Act (CPA). Firstly, the draft provides definitions for personal data, including biometric data and lists "biometric identifiers," c…

Source
Event type order
Action type announcement
Government branch executive
Government body other regulatory body