New Colorado Privacy Act (CPA) eff 7/1/23

Hello!Since your business is located in the State of Colorado,  we wanted to give you an overview of the new CPA (Colorado Privacy Act) eff 7/1/23.

Overview:

The CPA applies to companies that conduct business in Colorado or sell product or services intentionally targeted to residents of Colorado, and meet either of the following thresholds:1. controls or processes personal data of 100,000 or more consumers during a calendar year; or2. derive revenue or receive discounts from the sale of personal data and control or process data of at least 25,000 consumers.

The action items for your business that we will prepare for you:

1. Update your privacy notice 2. Update your website privacy policy3. Controllers need to conduct a data protection assessment (DPA) for processing activities that present a heightened risk of harm to a consumer

We will need to include the following opt out and right of access verbiage: 

• The right to opt out of the processing of personal data for targeted advertising or for the sale of such personal data. 

• The right to access certain personal data—and to obtain it in a portable, readily usable format and with the right to correct inaccuracies and to delete personal data concerning them. Once a consumer submits a request to access, correct, delete, or provide personal data, the receiving entity must respond to the consumer’s request within 45 days of receiving it. 

More to come…