The Colorado Attorney General’s Office has filed a set of proposed draft amendments to the Colorado Privacy Act (CPA) Rules, which largely focus on consumer data. The amendments include a new process for entities and individuals to request interpretive guidance and opinion letters regarding the intended effect of the CPA. House Bill 1130 also requires a controller or processor of biometric data to adopt a written policy with specific requirements.
