US update: Key features of the Colorado Privacy Act

Colorado’s data privacy statute bears similarities to other state privacy laws and European law, but also departs in some significant respects. By Elizabeth Canter & Natalie Dugan of Covington & Burling.

On 8 July 2021, Colorado ­Governor Jared Polis signed the Colorado Privacy Act (CPA) into law, making Colorado the third US state to pass a comprehensive data privacy statute. The CPA will take effect on 1 July 2023 on the heels of a flurry of legislative activity. Indeed, in relatively quick succession, California adopted comprehensive privacy legislation in the form of the California Consumer Privacy Act (CCPA) (adopted June 2018; effective January 2020); California strengthened the CCPA (see PL&B International Report December 2020, pp.13-17) through adoption of the California Privacy Rights Act (CPRA) (adopted November 2020; effective January 2023); and Virginia adopted the Virginia Consumer Data Protection Act (VCDPA) (adopted March 2021; effective January 2023).(1)

Continue reading

International Report subscribers: please login to access the full article.

If you wish to subscribe, please see our subscription information.