Colorado’s new consumer data protection law among the most demanding in the country
Businesses required to keep written data management policy, alert consumers within 30 days of breach
September 4, 2018
A new law that took effect on Saturday gives Colorado some of the most demanding standards for consumer data protection in the country. And businesses and government agencies that keep Coloradans' personal information need to ensure they are ready to comply, experts say.
The Protections for Consumer Data Privacy Act was signed into law May 29 after winning unanimous approval during Colorado's 2018 legislative session.
Primary sponsor Cole Wist celebrated the measure as "the nation's strongest data privacy law" in a tweet that day. The Centennial Republican wrote the rules "will better protect CO consumers and will reduce the risk of identity theft."
The law establishes three key responsibilities for businesses and government entities that keep either paper or electronic documents containing Coloradans' personal identifying information, the Colorado Office of the Attorney General says. It applies to all businesses, from one-person operations or multi-national corporations.