On December 21, 2022, the Colorado Attorney General (“AG”) issued its latest set of draft regulations for the Colorado Privacy Act, which takes effect on July 1, 2023. The draft regulations revise an earlier set published on October 10, 2022. While not yet final, these reflect a number of positive changes for companies, as well as additional detail on key areas including consent refresh, profiling, and controller duties. The most notable changes include:
Consent. Unlike the earlier draft regulations which offered little detail on refreshing consumer consent, the latest draft regulations provide some clarity.
