Colorado adopts consumer privacy legislation

The US state of Colorado has adopted the Colorado Privacy Act, to come into effect on 1 July 2023. The act establishes obligations for legal entities that conduct business or produce commercial products or services for Colorado residents, and provides consumers the right to opt out of access or processing personal data, correct inaccurate data, appeal refusals of the data controller, among others. 

Colorado is the third US state to adopt data privacy legislation, after California and Virginia.