On 8 July 2021, Colorado ­Governor Jared Polis signed the Colorado Privacy Act (CPA) into law, making Colorado the third US state to pass a comprehensive data privacy statute. The CPA will take effect on 1 July 2023 on the heels of a flurry of legislative activity. Indeed, in relatively quick succession, California adopted comprehensive privacy legislation in the form of the California Consumer Privacy Act (CCPA) (adopted June 2018; effective January 2020); California strengthened the CCPA (see PL&B International Report December 2020, pp.13-17) through adoption of the California Privacy Rights Act (CPRA) (adopted November 2020; effective January 2023); and Virginia adopted the Virginia Consumer Data Protection Act (VCDPA) (adopted March 2021; effective January 2023).(1)