Manatt privacy and data security Partner Brandon Reilly was quoted in VentureBeat discussing the newly enacted Colorado Privacy Act. The publication noted Colorado’s cross-industry privacy rights law marks another step forward for consumer data protections in the United States, following Virginia’s Consumer Data Protection Act (CDPA) and the California Consumer Privacy Act (CCPA). Reilly explained that the process required to respond to a privacy request, how long the business has to respond, and individual exceptions businesses may use to resist complying with a privacy request, for example, all differ between Colorado, California and Virginia. However, the publication noted, companies that are already CCPA-compliant are in pretty good shape. “The next step for enterprises in this position would be to assess what additional rights to consider, with a specific focus on the company’s Colorado-based consumers,” Reilly said. He also urged businesses to prioritize gaining a really deep understanding of their data, what they’re taking in and how it's being processed.
Read the article here.