Colorado Attorney General Phil Weiser recently announced that the Colorado Department of Law will begin enforcing the Colorado Privacy Act, which went into effect July 1, 2023. The Department sent a series of letters to covered entities that are meant to educate companies on their new legal obligations. 

The Colorado Privacy Act applies to entities that operate in Colorado or target Colorado residents and, annually, either: (1) collect more than 100,000 individuals’ data, or (2) receive revenue or otherwise benefit from the sale of personal data and process the personal data of more than 25,000 persons.