SB 21-190 CO
A state bill is a proposed law in a state legislature — separate from the U.S. Congress. Learn more →
Summary
The act creates personal data privacy rights and:Applies to legal entities that conduct business or produce commercial products or services that are intentionally targeted to Colorado residents and that either: Control or process personal data of at least 100,000 consumers per calendar year; or Derive revenue from the sale of personal data and control or process the personal data of at least 25,000 consumers; and Does not apply to certain specified entities including state and local governments and state institutions of higher education, personal data governed by listed state and federal laws, listed activities, and employment records. The act defines a "controller" as a person that, alone or jointly with others, determines the purposes and means of processing personal data. A "processor" means a person that processes personal data on behalf of a controller. Consumers have the right to opt out of a controller's processing of their personal data; access, correct, or delete the data; or obtain from a controller a portable copy of the data.The act:Specifies how controllers must fulfill duties regarding consumers' assertion of their rights, transparency, purpose specification, data minimization, avoiding secondary use, care, avoiding unlawful discrimination, and sensitive data; Requires controllers to conduct a data protection assessment for each of their processing activities involving personal data that present a heightened risk of harm to consumers, such as processing for purposes of targeted advertising, profiling, selling personal data, or processing sensitive data; and Specifies that a violation of its requirements is a deceptive trade practice for purposes of enforcement, but the act may be enforced only by the attorney general or district attorneys. Local governments are preempted from adopting laws that govern the processing of personal data by controllers or processors. The attorney general may promulgate rules to administer the act and is required to adopt rules detailing technical specifications for a universal opt-out mechanism that controllers must use.(Note: This summary applies to this bill as enacted.)
Sponsors (4)
- Robert Rodriguez Democratic · primary
- Paul Lundeen · primary
- Monica Duran Democratic · primary
- Terri Carver · primary
Action history (20)
- Jul 7, 2021 Governor Signed · executive
- Jun 25, 2021 Sent to the Governor · executive
- Jun 25, 2021 Signed by the Speaker of the House · lower
- Jun 25, 2021 Signed by the President of the Senate · upper
- Jun 8, 2021 Senate Considered House Amendments - Result was to Concur - Repass · upper
- Jun 7, 2021 House Third Reading Passed - No Amendments · lower
- Jun 4, 2021 House Second Reading Special Order - Passed with Amendments - Committee, Floor · lower
- Jun 3, 2021 House Committee on Appropriations Refer Unamended to House Committee of the Whole · lower
- Jun 3, 2021 House Second Reading Special Order - Laid Over Daily - No Amendments · lower
- Jun 2, 2021 House Committee on Finance Refer Amended to Appropriations · lower
- Jun 1, 2021 House Committee on Finance Witness Testimony and/or Committee Discussion Only · lower
- May 27, 2021 Introduced In House - Assigned to Finance · lower
- May 26, 2021 Senate Third Reading Passed - No Amendments · upper
- May 25, 2021 Senate Second Reading Passed with Amendments - Committee, Floor · upper
- May 21, 2021 Senate Second Reading Laid Over Daily - No Amendments · upper
- May 20, 2021 Senate Second Reading Laid Over Daily - No Amendments · upper
- May 18, 2021 Senate Second Reading Laid Over to 05/20/2021 - No Amendments · upper
- May 14, 2021 Senate Committee on Appropriations Refer Unamended to Senate Committee of the Whole · upper
- May 5, 2021 Senate Committee on Business, Labor, & Technology Refer Amended to Appropriations · upper
- Mar 19, 2021 Introduced In Senate - Assigned to Business, Labor, & Technology · upper
Text versions (10)
The published texts of this bill as it moves through the legislature. Each links to the official document on the state legislature site. Data from OpenStates.
Full text
The full text hasn’t been imported yet. CivicGate fetches it from the state legislature’s published version documents — check now.
Comments
Data from OpenStates. View on OpenStates →
Comments