The Colorado Attorney General (AG) released second-round, revised draft regulations (“revised draft rules”) on January 27 as a basis to guide implementation of the Colorado Privacy Act (CPA). The revised draft rules are based on public feedback received by the Colorado AG through Jan. 18, 2023. The revised draft rules modify the originally published draft rules (“initial draft rules”) in several major areas while retaining many of the hallmark provisions that make the CPA rules a new cornerstone in the U.S. data privacy law landscape. A first-round set of revised rules was previously released on December 21, 2022.

...