The State of Colorado Privacy: GPC, Cross-State Enforcement, & New Restrictions
summary
Colorado’s 2025 CPA changes increase limits on biometrics and minors data, add opt-in consent for sensitive categories including precise geolocation, and require data protection assessments for products likely to harm minors; Colorado joins a 10-state consortium and ran a multi-state GPC sweep that found many sites never implemented GPC recognition or misconfigured signal vs suppression handling. Enforcement now uses in‑house technical testing, mediation for individual complaints, and reviews roughly 20–40 complaints/month to prioritize systemic cases.
AI-written summary · about
chapters (10)
- 0:00Colorado privacy updates
- 1:03Colorado Privacy Act changes
- 3:53Biometric and minor data protections
- 8:102025 enforcement and 2026 outlook
- 11:50Multi-state privacy enforcement
- 15:46Global Privacy Control findings
- 20:41Honoring opt-out requests
- 23:492026 privacy priorities
- 27:01Privacy leader advice 2026
- 29:58Q&A age verification
related talks
40mWhat is New in California Privacy and What Does it Mean for the Company?
52mData Protection and Privacy Development Around the World
11mLessons Learned Deploying the Global Privacy Control to Millions of Customers
16mWebsites' Global Privacy Control Compliance at Scale and over Time
01h 07mStrategic Goals and Mechanisms of the GDPR and CCPA
01h 13m40 YEARS OF DATA PROTECTION AND MANY MORE TO COME: CONVENTION 108 AND 108+
46mHow to Design and Execute Superior Employee Privacy Practices
41mDigital Citizenry: Identity, Metadata, Credentialing & Reputation