Attorney General Phil Weiser announced through a series of letters to businesses sent this week, that the Colorado Department of Law will begin enforcing the recently enacted Colorado Privacy Act. The new data privacy law went into effect on July 1.
“As I’ve said publicly throughout the process, this Department’s enforcement of the Colorado Privacy Act is a critical tool to protect consumers’ data and privacy. Our enforcement of this important law will not seek to make life challenging for organizations that are complying with the law, but rather will seek to support such efforts,” said Weiser. “These letters will help make businesses aware of the law and direct them to educational resources to help them comply.”
Colorado Atty General Phil Weiser
The initial round of letters will focus on educating companies that operate in Colorado on their new legal obligations. There is particular emphasis on obligations relating to the collection and use of sensitive data, including the requirement to obtain consumer consent prior to collecting sensitive data, and the obligation to allow consumers to opt out of targeted advertising and profiling.
Department staff worked closely with industry, nonprofits, consumer advocates, and others over the last year to develop the law’s regulations, including allowing for substantial public comment from businesses, nonprofits, and consumers across the country.
The Colorado Privacy Act applies to entities that operate in Colorado or target Colorado citizens and, annually, either collect more than 100,000 individuals’ data, or receive revenue or otherwise benefit from the sale of personal data and process the personal data of more than 25,000 persons.
The law only applies to Colorado residents while acting in an individual or household capacity (e.g., when browsing the internet or signing up for a retail rewards program) and does not apply to data collected in an employment context.
For more information about the Colorado Privacy Act’s new rights and responsibilities, including an FAQ and informational webinars for consumers and organizations, please visit www.coag.gov/cpa.