The Protections for Consumer Data Privacy Act took effect Sept. 2, giving Coloradans what supporters call some of the strongest privacy safeguards in the country. The bill, which passed unanimously in the state House and Senate, requires businesses and government entities to have written policies for destroying documents that contain private information like Social Security numbers and biometric data. It also mandates "reasonable security procedures" for protecting information, and strengthens laws requiring companies to notify consumers if their data is compromised.
If a data breach affects more than 500 people in Colorado, the agency or business must now alert consumers and the attorney general within 30 days. The legislation is "a giant step forward for Colorado consumers," Rep. Cole Wist, R-Centennial, one the prime sponsors, said on Twitter.