Colorado Data Protection Policy

Is your Business in Compliance With the New Colorado Data Protection Law?
Based on the legislation in HB 18-1128, which was signed by the Governor last year and took effect in September of 2018, companies across Colorado must now comply with more stringent data protection requirements. This new law imposes several obligations on covered entities in the state that handle any kind of “personal identifying information” (or “PII”) of Colorado residents. These rules apply to businesses of all different types and sizes. In addition to the statutory requirements that all covered entities must adhere to, certain licensed professions have further emphasized the need for compliance with these new laws. For example, on December 4, 2018, the Colorado Real Estate Commission updated its “Commission Position on Office Policy Manuals” to reinforce the obligation for licensed real estate brokers to have written policies that comply with the new laws.Data Protection Policy and Personal Idendtifying Information
Frascona, Joiner, Goodman and Greenstein, P.C. can help your business comply with these requirements through a written Data Protection Policy (“DPP”). Among other things, the DPP will address how to:- Limit the amount of Personal Identifying Information that is gathered and stored in the first place;
- Safeguard the Personal Identifying Information that is gathered;
- Properly dispose of obsolete Personal Identifying Information; and
- Investigate and/or provide notice of any data breaches.