Compare with different regulatory event:

Description

Introduced Bill including comprehensive privacy protection

Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal privacy") is introduced. It would apply to businesses targeting Colorado residents either processing data of more than 100`000 consumers per year or deriving revenue from the sale of data of over 25`000 consumers, aiming to protect personal data (defined as information that is linked or reasonably linkable to an identified or identifiable individual). Besides that, it is foreseen that appropriate security standards are implemented in order to mitigate cybersecurity risks.

Original source

Scope

Policy Area
Other operating conditions
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-03-19
under deliberation

Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal pri…

2021-06-25
adopted

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal…

2021-07-07
adopted

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal…

2023-07-01
in force

The Colorado Privacy Act will go into effect on 1 July 2023 and will apply to organisations that do…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): sale
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data collection

personal data (all forms): storage (any form)

personal data (all forms): sale

personal data (all forms): data processing