Bill to Improve Colorado Privacy Act, Protect Colorado Consumers Goes into Effect

DENVER, CO – On July 1, 2025, bipartisan legislation sponsored by Senator Lindsey Daugherty, D-Arvada, goes into effect to amend the Colorado Privacy Act to include protections for biometric data.

Biometric data is highly unique to an individual and includes fingerprints, facial recognition used to unlock smartphones, and iris scanning. HB24-1130 requires biometric data to be destroyed within two years of collection or when the data is no longer needed, whichever is earliest, and to be stored securely.

“From fingerprint scanners to the facial recognition that unlocks our smartphones, our biometric data is intertwined with current and emerging technology,” said Daugherty. “Biometric data is incredibly personal. This law ensures our biometric data is protected and stored safely, improving consumer protections and reducing the risk of our personal data being used improperly.” 

In 2021, legislators passed SB21-190 to enact the Colorado Privacy Act and make it a deceptive trade practice for entities who control the personal data of at least 25,000 people to process sensitive data without consent.