Digital Policy Alert logo

United States of America: Issued draft Rules implementing the Colorado Privacy Act

Policy overview

Description

Issued draft Rules implementing the Colorado Privacy Act

On 29 September 2022, the Colorado Attorney General's Office issued the draft Rules implementing the Colorado Privacy Act (CPA). Firstly, the draft provides definitions for personal data, including biometric data and lists "biometric identifiers," c…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2022-09-29
under deliberation

On 29 September 2022, the Colorado Attorney General's Office issued the draft Rules implementing th…

2022-10-10
in consultation

On 10 October 2022, the Colorado Attorney General’s Office opened a consultation on the draft rules…

2022-12-21
in consultation

On 21 December 2022, the Colorado Attorney General (AG) opened the public consultation on the revis…

2023-02-01
processing consultation

On 1 February 2022, the public consultation closes on the revised draft of the Colorado Privacy Act…

2023-02-23
adopted

On 23 February 2023, the Colorado Privacy Act rules were adopted. Notably, the rules introduce upda…

2023-03-15
in grace period

On 15 March 2023, the Colorado Privacy Act Rules were finalised by filing with the Secretary of Sta…

2023-07-01
in force

On 1 July 2023, the Colorado Privacy Act Rules are implemented. The rules generally specify how rig…

2024-07-01
in force

On 1 July 2024, the requirements regarding opt-out mechanisms and consent requirements under the Co…