United States of America: Announced Attorney General Amendments to Colorado Privacy Act Rules including data protection regulation

On 13 September 2024, the Colorado Attorney General announced Amendments to the Colorado Privacy Act (CPA) Rules. Under the CPA, the Attorney General can promulgate rules governing privacy, including general rules for the purpose of carrying out the CPA. The Attorney General Amendments include special protection for minors, requiring parental consent for processing data of children under 13. Further, the amended Rules mandate explicit consent for processing data of minors and using design features designed to extend use by minors, and set out further requirements for risk assessments for handling minors' data. Additionally, the amendments address the collection and processing of biometric identifiers, setting specific requirements for notices and consent, particularly in the employment context.