The Colorado Privacy Act (CPA) passed on June 7, 2021, making Colorado the next major state to shape the US Privacy landscape. The CPA increases the protection of consumers’ data and further expands consumer privacy rights for Colorado residents.
Like the Virginia CDPA, the CPA establishes several privacy rights including the right to opt-out, right to access, right to correction, right to deletion, and the right to data portability. The CPA also imposes obligations on data controllers such as transparency, purpose specification, data minimization, avoiding unlawful discrimination, and the use of sensitive data.
The CPA will go into effect on July 1, 2023.