On July 8, 2021, Colorado’s governor signed signed SB 21-190, the Colorado Privacy Act (CPA), which establishes a personal data privacy rights framework for the state.
Colorado is the third state to enact a comprehensive consumer privacy law, following California and Virginia’s lead. Key elements covered in the CPA include: applicability, consumer rights, controller responsibilities, data processing agreements, private right of action, and State Attorney General rule writing, enforcement, and preemption.
