HB 18-1128

HB 18-1128, also known as Protections for Consumer Data Privacy, is a Colorado bill that requires businesses and government entities in the state to develop policies for securely destroying personal information stored on paper or electronically. It also mandates these organizations to implement reasonable security measures to protect this data from unauthorized access. If there's a breach involving unencrypted or encrypted computerized data, specific parties must be notified about what happened and how it could affect them. Since the bill has been signed into law, businesses and government entities in Colorado now have new requirements they need to follow regarding the handling and protection of personal information.

Official Summary

Except for conduct in compliance with applicable federal, state, or local law, the bill requires covered and governmental entities in Colorado that maintain paper or electronic documents (documents) that contain personal identifying information (personal information) to develop and maintain a written policy for the destruction and proper disposal of those documents. Entities that maintain, own, or license personal information, including those that use a nonaffiliated third party as a service provider, shall implement and maintain reasonable security procedures for the personal information. The notification laws governing disclosure of unauthorized acquisitions of unencrypted and encrypted computerized data are expanded to specify who must be notified following such unauthorized acquisition and what must be included in such notification. (Note: This summary applies to the reengrossed version of this bill as introduced in the second house.) Read More

Votes