The bill requires a governmental entity that maintains, owns, or
licenses computerized data that includes certain personal information about any Colorado residents, or a governmental entity that uses a third-party service provider to maintain computerized data that includes certain personal information, to give notice to those Colorado residents every 90 days.
The notice must give Colorado residents the option to either assent
to the governmental entity possessing the Colorado resident's personal information or request that the governmental entity dispose of any paper or electronic documents containing the Colorado resident's personal identifying information.
