With the signature of Governor Jared Polis last week on the Colorado Privacy Act, Colorado became the third state (following California and Virginia) to adopt a comprehensive consumer privacy law.

We will provide you with a more comprehensive summary of the new Virginia and Colorado laws in the coming weeks, but for now, the highlights of the Colorado law, similar to provisions in the California Consumer Privacy Act, include the right for consumers to access their data delete the information, and opt-out of the sale of their data.  The law also requires some companies to show why they are collecting data, how they use it, and a requirement to minimize the use of personal data.

The law gives the Attorney General regulatory enforcement jurisdiction. It does not provide a private right of action for consumers to assert in the event of a violation.

The Colorado consumer privacy law goes into effect on July 1, 2023.