Colorado Sets Feb. 1 Hearing on Draft Privacy Rules

Colorado Attorney General Phil Weiser (D) submitted draft rules Saturday to implement the state’s privacy law, and scheduled a Feb. 1 partially virtual rulemaking hearing. The Colorado Privacy Act (CPA) draft rules will be posted in the Colorado Register Oct. 10, said the Department of Regulatory Agencies’ rulemaking page. Colorado's draft rules “address several important issues that were notably absent from the draft California regulations, including regulations on profiling, data protection assessments … and the universal opt-out mechanism,” Ballard Spahr lawyers blogged. Draft rules appear more “principle-guided” than “hyper-prescriptive,” they said. Husch Blackwell’s David Stauss blogged that the draft rules “are a complex and lengthy set of regulations that, if adopted without substantial modification, will significantly expand the CPA’s requirements and require controllers to carefully consider their compliance obligations.” After the Feb. 1 hearing, the state will have 180 days to file adopted rules, which would take effect 20 days after publication in the Colorado Register, said Stauss.