Colorado Finalizes Consumer Data Privacy Mandates for Companies

Businesses in Colorado will face new consumer privacy mandates starting July 1 after the state attorney general finalized rules to implement the Colorado Privacy Act.

The rules, finalized March 15, give consumers more control over how their information is used, including the ability opt out of having their data sold. Colorado joins comprehensive privacy laws in California, Connecticut, Utah, and Virginia that companies must navigate this year, and businesses have raised questions over how they will comply with the various measures.

Attorneys working on the Colorado rules “thoughtfully incorporated feedback throughout the rulemaking to carefully craft rules to both ...