Personal Data Privacy

One of the most talked-about bills passed at the Legislature this year is SB21-190, the Colorado Privacy Act. This legislation, which was signed into law by Governor Polis on July 7, gives Coloradans more choices in how large commercial websites can collect their personal data. Consumers can opt-out of data collection, such as tracking websites visited, through a browser setting that will be implemented by 2024. Under the new law, consumers can also obtain a copy of what data is being collected on them. These protections will apply to large commercial websites; financial institutions and government sites are exempt.

Colorado is among the first states to pass such a law. For a summary of the issue and similar laws passed by other states, see the Colorado Legislative Council’s Issue Brief, Consumer Data Privacy Laws, published in 2020. Additionally, for further background, see Data Privacy in Colorado from 2014.