Colorado consumer data privacy act

Bezeichnung

Bezeichnung

Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

Ebene

Bundesstaat CO

Status

In Kraft

Angenommen

2021-07-07

Gilt ab

2023-07-01

Aufsichtsbehörden

Colorado AG

Benannte Anforderungen

• Applicability and thresholds

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  100,000 consumers, or 25,000 consumers with revenue or a discount from the sale of personal data.

• Privacy notice

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.

• Consumer rights

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  Access, deletion, portability, correction and opt-out of targeted advertising, sale and certain profiling, with an appeal route.

• Sensitive data

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  Consent, or in some states a strict necessity standard, before sensitive categories are processed.

• Data protection assessment

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.

• Processor contract

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  A written contract that sets instructions, confidentiality, deletion or return, and audit rights.

• Enforcement

  Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313

  Enforced by the state authority. Universal opt-out mechanism recognised by the Attorney General, with rules in 4 CCR 904-3.

Amtliche Quelle

• leg.colorado.gov
• coag.gov

EU-Rechtsakte zum selben Gegenstand

• gdpr

  Deckt dieselben Fragen wie die Datenschutz-Grundverordnung zu Information, Rechten und Auftragsverarbeitung ab, mit engerem Anwendungsbereich und ohne allgemeines Erfordernis einer Rechtsgrundlage.