Exploring the Colorado Privacy Act (CPA) with Compliance Tips | UpGuard

This report provides an overview of the Colorado Privacy Act (CPA), effective July 1, 2023, describing the rights granted to Colorado residents (including access, deletion, correction, data portability, and opt-outs for sale or targeted advertising), definitions of personal and sensitive data, applicability thresholds for controllers and processors, exemptions (such as certain federal-regulated data like HIPAA), required compliance measures (transparency, data minimization, data protection assessments, and contractual obligations between controllers and processors), and enforcement provisions delegated to the Colorado Attorney General and district attorneys.