On 29 July 2025, the Colorado Department of Law proposed amendments to the Colorado Privacy Act Rules (4 CCR 904-3), introducing new obligations for entities processing biometric data and data from minors. The rules clarify that biometric data inclu…