Colorado Capitol Watch

Login

Welcome Visitor

 
Forgot password?
----------
Subscribe for Current Session

My CCW Tools

Look Up Bills

Look Up Legislators

Legislative Year: 2024 Change
  •  
  •  

Bill Detail: SB24-041

Return to list of bills

emailSend an email to your legislator

Title Privacy Protections for Children's Online Data
Status Governor Signed (05/31/2024)
Bill Subjects
  • Financial Services & Commerce
House Sponsors J. Mabrey (D)
L. Frizell (R)
Senate Sponsors P. Lundeen (R)
R. Rodriguez (D)
House Committee Business Affairs and Labor
Senate Committee Business, Labor and Technology
Date Introduced 01/10/2024
Summary

The bill amends the Colorado Privacy Act to add enhanced
protections when a minor's data is processed and there is a heightened risk
of harm to the minor. The bill applies to any entity that controls consumer
personal data (controller) and that conducts business in Colorado or
delivers products or services that are targeted at Colorado residents,
regardless of the volume of or amount of revenue derived from that
activity.
A controller that offers an online service, product, or feature to a
consumer that the controller knows or willfully disregards is a minor is
required to:
  • Use reasonable care to avoid any heightened risk of harm
to minors caused by the service, product, or feature; and
  • Conduct, and review as necessary, a data protection
assessment for the service, product, or feature and maintain
documentation regarding the assessment for a specified
period.
Unless the minor or, for a minor who is under 13 years of age, the
minor's parent or legal guardian has consented, a controller is prohibited
from processing a minor's personal data:
  • For targeted advertising, selling the minor's personal data,
or profiling the minor's personal data;
  • For any processing purpose other than the purpose
disclosed at the time the minor's personal data is collected
or a purpose reasonably necessary for the disclosed
processing purpose; or
  • For longer than reasonably necessary to provide the
service, product, or feature.
A controller is also prohibited from:
  • Using a system design feature to significantly increase,
sustain, or extend a minor's use of the service, product, or
feature; or
  • Collecting a minor's precise geolocation, except under
specified circumstances.
The attorney general and district attorneys are authorized to
enforce the requirements of the bill in the same manner as authorized
under the Colorado Privacy Act, including notifying a controller of, and
allowing a controller time to cure, a violation.

Committee Reports
with Amendments
Full Text
Full Text of Bill (pdf) (most recent)
Fiscal Notes Fiscal Notes (07/08/2024) (most recent)  
Additional Bill Documents Bill Documents
Including:
  • Past bill versions
  • Past fiscal notes
  • Committee activity and documents
  • Bill History
 
Lobbyists Lobbyists
Audio [This feature is available by subscription.]  
Votes House and Senate Votes
Vote Totals Vote Totals by Party
 
 
 
Copyright © 2008-2024 State Capitol Watch