On July 7, 2021, Colorado became the third U.S. state to establish regional data privacy legislation. The Colorado Privacy Act (CPA), also called the Colorado Privacy Law, became effective on July 1, 2023.
The CPA grants Colorado consumers various privacy protection rights and the opportunity to learn more about the types of data controllers, and processors are collecting, sharing, and selling.
Entities acting as data controllers determine what types of data are collected and how this data is collected from consumers.
Connecticut’s Personal Data Privacy and Online Monitoring act went into effect on July 1, 2023, whereas Utah’s Consumer Privacy Act will be effective starting December 31, 2023.