CO SB 21-190 / CRS § 6-1-1301 et seq.
Comprehensive privacy law covering personal data of 100,000+ Colorado consumers or 25,000+ with 25%+ revenue from data sales. Consumer rights: access, correction, deletion, portability, opt-out. Requires universal opt-out mechanism compliance, Data Protection Impact Assessments, and detailed risk documentation. No cure period; active AG enforcement.