Companies compliant with the GDPR and similar US state laws will have a substantial headstart with the Colorado Privacy Act. Recognizing the key differences will enable organizations with a well-designed compliance program to efficiently accommodate all these laws.
- The law provides for a mandatory universal consumer opt-out of targeted advertising, data sales and profiling.
- The Colorado law places new obligations on those businesses not subject to federal privacy laws.
- Enhanced mechanisms for enforcement make compliance even more important in implementing a robust compliance program.