Attorney general publishes Colorado Privacy Act draft regulations

According to Husch Blackwell's "Byte Back," the Colorado attorney general's office released draft regulations for the Colorado Privacy Act. The draft rules include clarity around the definition of biometric information, responses to data subject requests, disclosure requirements for customer loyalty programs and privacy notice updates. The draft rules also add a category for sensitive data inferences. The attorney general announced stakeholder meetings on the draft rules Nov. 10, 15 and 17 as well as a public hearing Feb. 1, 2023. Editor's note: The IAPP has a timeline of key dates for the Colorado Privacy Act and other comprehensive state privacy laws.