Lexology December 1, 2021
On July 7, 2021, Colorado became the third state to enact a comprehensive privacy law. The Colorado Privacy Act (CPA) has elements in common with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) and largely tracks the new Virginia Consumer Data Protection Act (VCDPA). Only the CCPA is currently in effect; the CPA, CPRA, and VCDPA will take effect in 2023. All these laws impose new obligations on businesses and provide residents of these states with new rights regarding the collection and use of their personal information. While there are many similarities among the laws, there are also some key differences, as set forth in the table below.
All the laws define the term “personal information”...