Colorado Privacy Act, duty regarding sensitive data (Colo. Rev. Stat. 6-1-1308(7) (SB 21-190))
Sensitive data (health, sex life, religion, biometrics, children and, after later amendments, more categories) needs prior opt-in consent before it is processed, which includes disclosing it for AI training.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(7) Duty regarding sensitive data. A CONTROLLER SHALL NOT PROCESS A CONSUMER'S SENSITIVE DATA WITHOUT FIRST OBTAINING THE CONSUMER'S CONSENT”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide