Under the Colorado Privacy Act (“CPA”), consumers now have explicit rights to opt out of the sale of personal information and the processing of such data for targeted advertising. This development is in line with measures taken by other states to protect consumer data privacy. The attorney general of Colorado has now submitted a shortlist of universal opt-out mechanisms (UOOM) for public comment. These measures will take effect on July 1, 2024, mandating that all organizations covered under the act must provide consumers with a universal opt-out option.
Submitted by the office of the Colorado Attorney General, this shortlist clarifies the mechanisms organizations can employ to comply with the UOOM aspects of the CPA. The selection process took into account several important considerations, including the consumer-friendliness of the opt-out mechanism, ease of implementation for businesses, and overall effectiveness in preventing personal data from being used for targeted advertising or sold without consent or knowledge.
The perceived effectiveness and technical feasibility of universal opt-out mechanisms occupy center-stage in discussions about the CPA and similar legislation. The acceptance or rejection of proposed measures stands to have significant impacts on how businesses operate, particularly in terms of how they handle customer data.
The specifics of the shortlisted mechanisms, as well as how businesses can implement them, have not yet been made public. However, the global legal community and privacy advocates eagerly await the decision, as it is likely to have ripple effects across the industry, influencing legislation in other jurisdictions and setting a possible precedent for future data privacy regulations.
For more detail on the submission, check the report provided by
Balch & Bingham LLP.