Compare with different regulatory event:
The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal privacy") is signed by the Governor. The Act moves into effect 2023-07-01. It applies to businesses targeting Colorado residents either processing data of more than 100`000 consumers per year or deriving revenue from the sale of data of over 25`000 consumers, aiming to protect personal data (defined as information that is linked or reasonably linkable to an identified or identifiable individual). Among others, it is foreseen that system security standards are implemented in order to mitigate cybersecurity risks.
Original source