CPA - Colorado Privacy Act (Colorado, United States of America, USA)

Official Name

CPA or SB 21-190 Colorado Privacy Act

Details About the CPA

The bill has an effective date of January 1, 2023. 

The act creates personal data privacy rights and:

• Applies to legal entities that conduct business or produce commercial products or services that are intentionally targeted to Colorado residents and that either:
• Control or process personal data of at least 100,000 consumers per calendar year; or
• Derive revenue from the sale of personal data and control or process the personal data of at least 25,000 consumers; and
• Does not apply to certain specified entities including state and local governments and state institutions of higher education, personal data governed by listed state and federal laws, listed activities, and employment records.

Resources About the CPA:

• Official legislation here 
• Article on our blog here
• A legal perspective here