CPA

Introduction

The CPA (Colorado Privacy Act) is a privacy law applicable to residents of the state of Colorado and came into effect on 1st July 2023. Businesses worldwide must comply with the Colorado Privacy Act if they process the personal data of Colorado users. For more information, see How Publishers Can Prepare For The Colorado Privacy Act.

How to Get Compliant

To become compliant with CPA, you should:

• Implement adequate data security safeguards,
• Inform their consumers in Colorado of their rights through a reasonably; accessible and clear privacy policy which explains the collection and use of data,
• Update their contracts with third parties to ensure that they comply with the laws,
• Acquire consent to process sensitive personal data and acquire consent from a parent or lawful guardian before obtaining children's personal data,
• Only share valid consented data with ad partners,
• Provide a clear link to users to opt-out of processing of personal data for the purposes of targeted advertising, sale, or profiling,
• Given the above, rely on a mechanism to honor consumer requests,
• Establish a user-selected universal opt-out mechanism by July 1, 2024.
• Given the above, rely on a mechanism to scale and process opt-out requests. For more information, see Opt-Out Mechanism.