Senate Approves Bill to Improve Colorado Privacy Act, Protect Colorado Consumers

Legislation would amend the Colorado Privacy Act to include protections for biometric data

DENVER, CO – The Senate today voted to approve Senator Chris Hansen’s, D-Denver, bipartisan bill to amend the Colorado Privacy Act to include protections for biometric data.

Biometric data is highly unique to an individual and includes fingerprints, facial recognition used to unlock smartphones, and iris scanning. Cosponsored by Minority Leader Paul Lundeen, R-Monument, HB24-1130 would require biometric data to be destroyed within two years of collection or when the data is no longer needed, whichever is earliest, and to be stored at a higher level of security.

“Coloradans have the right to know which companies have their biometric data and what specific data they have,” said Hansen. “Biometric data is increasingly being used for security purposes, like using a fingerprint or faceprint as a password, which means companies are in possession of highly sensitive data. This important policy will improve transparency, reduce the risk of exploitation, and bolster consumer protections.”

In 2021, legislators passed SB21-190 to enact the Colorado Privacy Act and make it a deceptive trade practice for entities who control the personal data of at least 25,000 people to process sensitive data without consent.

HB24-1130 will now return to the House for consideration of amendments. You can follow its progress HERE.