Colorado Consumer Privacy Bill Passes, Heads to Governor’s Desk

NYU Law Compliance and Enforcement Blog

25 Jun 2021

Marian Waldmann Agarwal, Cynthia Rich, and Robert Famigletti authored an article that was republished in NYU Law’s Compliance & Enforcement blog, covering Colorado becoming the third state to enact a comprehensive privacy law and discussing the scope of the Colorado Privacy Act (CPA), which will become operative on July 1, 2023 if approved by Governor Jared Polis.

“The CPA tracks closely with the recently-enacted Virginia Consumer Data Protection Act, including by distinguishing between data ‘controllers’ (i.e., businesses that determine the purpose and means of processing personal data) and ‘processors’ (i.e. businesses that process personal data on behalf of a controller), and by prescribing GDPR-like obligations,” the authors wrote. “However, the CPA’s enforcement regime would mark a significant departure from the other state consumer privacy laws, empowering both the Colorado Attorney General and district attorneys to enforce violations of the Act and prescribing civil penalties of up to $20,000 per violation.”

Read the full article.



Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our Privacy Policy, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.