...And Colorado Makes Three

Colorado's legislature passed yesterday what could become the nation's third comprehensive state privacy law. The bill moved back and forth between chambers, but ultimately passed and can now be sent to the governor for signature. Once signed, it would take effect in mid-2023.

2023 is shaping up as a banner year for US privacy: the proposed Colorado law would join a new state comprehensive privacy law in Virginia and a heavily amended California law that take effect earlier that year.  

Colorado's law would allow consumer opt-out of certain data uses.  All companies that do business in the US would be well advised to pay attention to these state laws, the nuances of which may differ slightly and which therefore may present some difficult operational choices regarding compliance.