Compare with different regulatory event:
The Colorado Privacy Act will go into effect on 1 July 2023 and will apply to organisations that do business with or manufacture products and services for Colorado residents. Additionally, it will apply to companies that control or process the data of 100.000 customers each year or generate money from the sale of personal data and control or process the data of 25.000 customers per year. Among others, it is foreseen that system security standards are implemented in order to mitigate cybersecurity risks.
Original source