What is the Colorado Privacy Act (“CPA”)?
Colorado became the third state in the country to pass a consumer privacy law with the passing of the Colorado Privacy Act (“CPA”), a law regulating how companies are allowed to use the personal information of Colorado consumers. The law comes into effect on July 1, 2023. Then in July of 2024, the global privacy control browser setting requirement will come into effect.
The CPA is similar to the California Consumer Privacy Act (CCPA), California Consumer Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), and the EU General Data Protection Regulation (GDPR) in many ways. The CPA prescribes data rights for consumers and duties for controllers and processors of data. It provides consumers the right to access, correct, and delete personal data and the right to-opt-out of the sale of personal data and the collection and use of personal data. It imposes an obligation upon companies to safeguard personal data; to provide clear, understandable, and transparent information to consumers about how their personal data is used; and to strengthen compliance and accountability by requiring data protection assessments in the collection and use of personal data. The enforcement is entirely up to the Attorney General and District Attorneys and there is no private right of action for consumers.
Stay Ahead of the Curve! Explore our comprehensive CLIClaw Colorado Privacy Compliance Library for in-depth resources and insights.
These materials were obtained directly from the State Government public websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.