United States of America: Colorado General Assembly passed bill including comprehensive privacy protection to the Governor

The Colorado Senate Bill 21-190 ("Act Concerning additional protection of data relating to personal privacy") is passed to the Governor for signing. The act moves into effect 2023-07-01. It would apply to businesses targeting Colorado residents either processing data of more than 100`000 consumers per year or deriving revenue from the sale of data of over 25`000 consumers, aiming to protect personal data (defined as information that is linked or reasonably linkable to an identified or identifiable invidual) and giving consumers the right to access (correction, deletion, data portability), obtain a copy and opt out of the processing of their personal data. It would further introduce duties of transparency, specification, data minimization, avoiding secondary use and care regarding security.