Cybersecurity Policy Report, Colorado AG Files Proposed Amendments to Privacy Rules, (Sep 16, 2024)

By Tony Foley

The office of Colorado Attorney General Phil Weiser (D.) announced on Friday that it had filed a set of proposed draft amendments to the rules promulgated last year to implement the Colorado Privacy Act (CPA).

The original rules were published in March 2023 and went into effect on July 1 of that year (CPR, March 16). According to the AG’s announcement, the amendments are designed to create a process for issuing opinion letters and interpretive guidance as provided in the CPA and to modify the language of the rules to be consistent with amendments made to the CPA by the following two legislative amendments from this year: S.B. 41, 74th Leg, 2d Sess. (Colo. 2024), which added enhanced protections when a minor’s data is processed and there is a heightened risk of harm to the minor, effective Oct. 1, 2025 (CPR, June 3) and H.B. 1130, 74th Leg, 2d Sess. (Colo. 2024), which provides for additional protections for biometric data, effective July 1, 2025 (CPR, June 3).

The AG’s official notice of proposed rulemaking says his office will be accepting public input on the amendments beginning Sept. 25 through Nov. 7. The announcement provides a link for interested parties to submit comments, as well as to a page that will store comments submitted on the proposed changes. In addition, the AG will hold a public meeting on Nov. 7 to discuss the amendments both in person and by videoconference via a link found in the notice of proposed rulemaking. Interested parties are encouraged to register in advance but are not required to do so.

News: StateLegislation DataPrivacy