HB18-1128 - Protections For Consumer Data Privacy

Concerning strengthening protections for consumer data privacy.

Except for conduct in compliance with applicable federal, state, or local law, the bill requires public and private entities in Colorado that maintain paper or electronic documents (documents) that contain personal identifying information (personal information) to develop and maintain a written policy for the destruction and proper disposal of those documents. Entities that maintain, own, or license personal information, including those that use a nonaffiliated third party as a service provider, shall implement and maintain reasonable security procedures for the personal information. The notification laws governing disclosure of unauthorized acquisitions of unencrypted and encrypted computerized data are expanded to specify who must be notified following such unauthorized acquisition and what must be included in such notification.
(Note: This summary applies to this bill as introduced.)

Latest update: April 20, 2018
04/20/2018 - House Third Reading Passed - No Amendments
04/19/2018 - House Second Reading Special Order - Passed with Amendments - Committee, Floor
04/19/2018 - House Committee on Appropriations Refer Unamended to House Committee of the Whole
02/14/2018 - House Committee on State, Veterans, & Military Affairs Refer Amended to Appropriations
01/19/2018 - Introduced In House - Assigned to State, Veterans, & Military Affairs