Description

Colorado Governor signs bill including comprehensive privacy protection

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal privacy") is signed by the Governor. The Act moves into effect 2023-07-01. It applies to businesses targeting Colorado residents either processing da…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-03-19
under deliberation

Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal pri…

2021-06-25
adopted

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal…

2021-07-07
adopted

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal…

2023-07-01
in force

The Colorado Privacy Act will go into effect on 1 July 2023 and will apply to organisations that do…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): storage (any form)
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): sale
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Preventive security requirement
Sanctions
Determined by existing law or regulation
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data collection

personal data (all forms): storage (any form)

personal data (all forms): sale

personal data (all forms): data processing