Colorado Joins List of States Proposing Privacy Laws
Colorado has introduced the “Colorado Privacy Act”, noting that “EU GDPR is emerging as a model for countries across the globe in data privacy”.
Act states that processing must be necessary, reasonable and proportionate to the specific purpose disclosed. It will grant consumer rights: access, correction, deletion, data portability and right to opt out of general collection and use of personal data not just use for sale.
It will also require opt-in consent for processing sensitive data. Definition of “consent” modeled after Article 7 of GDPR.