A Report on the Colorado Privacy Act

The Colorado Privacy Act (CPA) was signed into law on 8 July 2021.

The CPA is the third comprehensive state privacy law in the U.S., following the California Consumer Privacy Act (CCPA) and Virginia’s Consumer Data Protection Act (CPDA).

While similar to these other laws in many respects, the CPA has some unique characteristics that could have significant implications, including relatively broad applicability, limits on data re-use, and a strong definition of “consent” that prohibits the use of so-called “dark patterns.

”Many businesses operating in the U.S. will be covered by the CPA. This report provides a comprehensive overview of the CPA and considers potential impacts for businesses falling within its scope.