Colorado Privacy Act

CPA

什么是CPA？

CPA是科罗拉多隐私法案，于2022年3月24日签署生效。这是一项类似于美国CCPA的隐私法。

“个人信息的出售”被定义为“控制者向第三方以货币或其他有价值的考虑交换个人数据”。

与CCPA、VCDPA、UCPA、GDPR的区别

CPA没有包含任何收入门槛
与CCPA和CDPA不同，即使公司从数据销售中获得的总年收入不到50%，CPA也适用

CPA适用于谁？

在日历年内控制或处理至少10万名消费者的个人数据; 或
从个人数据的销售中获得收入或获得商品或服务价格折扣，且处理或控制至少2.5万名消费者的个人数据。

个人身份信息（PII）

生物识别信息
信用卡和借记卡号码
驾驶执照和车牌号码
电子邮件地址
就业信息
财务数据
医疗和保险信息
邮寄地址
军事ID号码
护照ID号码
密码
实际地址
社会安全号码
学生ID号码
电话号码
用户名

敏感个人信息

种族或族裔起源
宗教信仰
精神或身体健康状况或诊断
性生活或性取向
公民身份或公民身份状态
可用于唯一识别个人目的的基因或生物识别数据
已知的儿童

消费者在CPA下的权利

访问权
更正权
删除权
数据可携带权
有针对性地选择退出使用他们的个人数据进行定向广告、销售或个人资料制作档案
上诉权

CPA执法和罚款

控制者有60天时间纠正违规行为。不符合要求的实体可能面临每次违规最高2万美元的罚款。

CPA与同意管理

选择退出模型：与迄今为止在美国采用的其他州级法律一样，大多数情况下，数据控制者在收集个人信息之前不需要获取消费者的同意。

同样，未经同意，控制者不得处理 "敏感数据"。同意必须是 "自由给予的、具体的、知情的和明确的"。

缺乏同意，CPA规定控制器不得为“与处理个人数据的指定目的不合理必要或兼容的目的”而处理个人数据。

科罗拉多隐私法（CPA）时间表

于2021年7月8日签署生效
CPA将于2023年7月1日生效

其他美国州隐私法

CCPA：加利福尼亚消费者隐私法，了解更多信息请访问CCPA
CPRA：加利福尼亚隐私权法案，了解更多信息请访问CPRA
CPA：科罗拉多隐私法，了解更多信息请访问CPA
VCDPA：弗吉尼亚消费者数据保护法案，了解更多信息请访问VCDPA
UCPA：犹他州消费者隐私法，了解更多信息请访问UCPA
CTDPA：康涅狄格数据保护法，了解更多信息请访问CTDPA
COPPA：儿童在线隐私保护法案，了解更多信息请访问COPPA

比较不同的美国州隐私法

如何符合并实施科罗拉多隐私法合规解决方案？

使用同意管理平台，如UniConsent，为消费者提供对数据收集的完全控制、退出功能、管理首选项的通信。

Comply With Global Privacy Regulations

General Data Protection Regulation (GDPR)

Achieve seamless compliance with the General Data Protection Regulation (GDPR) – the cornerstone of data privacy in the European Union. Safeguard user data and build trust with our comprehensive GDPR compliance solutions.

California Consumer Privacy Act (CCPA)

Navigate the intricate landscape of the California Consumer Privacy Act (CCPA) effortlessly. Our CCPA compliance tools ensure that you adhere to the rigorous data protection standards required for California residents.

U.S. State Privacy Laws

Stay ahead of evolving privacy regulations in the United States. Our platform supports a range of state-specific laws, including CCPA, CPRA, CPA, VCDPA, UCPA, and COPPA, ensuring you remain compliant across all jurisdictions.

California Privacy Rights Act (CPRA)

Embrace the future of data privacy with the California Privacy Rights Act (CPRA). As a pioneering state-level legislation, CPRA empowers businesses to enhance their data protection practices and prioritize consumer privacy.

Colorado Privacy Act (CPA)

Prepare for the Colorado Privacy Act (CPA) with UniConsent CMP. Our solutions help you meet the stringent requirements of this forward-thinking state-level privacy law, ensuring the highest level of data security and compliance.

Virginia Consumer Data Protection Act (VCDPA)

Comply confidently with the Virginia Consumer Data Protection Act (VCDPA). UniConsent CMP provides the tools and expertise to ensure your organization aligns with VCDPA's robust data privacy framework, bolstering trust among Virginia residents.

Utah Consumer Privacy Act (UCPA)

Protect user data effectively with the Utah Consumer Privacy Act (UCPA). UniConsent CMP offers solutions that facilitate compliance with this emerging privacy law, ensuring your business is well-prepared for data privacy challenges in Utah.

Connecticut Data Protection Act (CTDPA)

Guard user information and uphold their privacy rights under the Connecticut Data Protection Act (CTDPA). UniConsent CMP's suite of compliance tools empowers you to navigate this state-level law seamlessly and responsibly.

Children’s Online Privacy Protection Act (COPPA)

Prioritize children's privacy with UniConsent CMP's COPPA compliance solutions. Complying with the Children’s Online Privacy Protection Act (COPPA) is simplified, allowing you to provide a safe online environment for young users.

General Data Protection in Thailand (PDPA)

Adhere to the Personal Data Protection Act 2019 (PDPA) in Thailand with UniConsent CMP. Our expertise in PDPA compliance ensures that your organization can operate confidently and securely in the Thai market while respecting user data privacy.

The General Data Protection Law in Brazil (LGPD)

UniConsent CMP facilitates compliance with Brazil's General Data Protection Law (LGPD). Our solutions empower businesses to meet LGPD's stringent requirements, safeguarding the personal data of individuals in Brazil.

China Personal Information Protection Law (PIPL)

Prepare for the China Personal Information Protection Law (PIPL) with UniConsent CMP. As data protection regulations evolve in China, our platform ensures your organization is well-equipped to handle personal information responsibly and securely.

Protection of Personal Information Act in South Africa (POPIA)

The Summary of Protection of Personal Information Act, POPI Act, POPIA, South African Privacy Law.

India’s Personal Data Protection (PDP)

The Personal Data Protection bill for India could require changes to your data management and is not directly solved with GDPR compliance.

Turkey Personal Data Protection Law (KVKK)

The Summary of Turkey’s Personal Data Protection Law: KVKK.

UK General Data Protection Regulation (UK GDPR)

Achieve seamless compliance with the General Data Protection Regulation (GDPR) – the cornerstone of data privacy in the UK. Safeguard user data and build trust with our comprehensive GDPR compliance solutions.

IAB TCF V2 registered consent manager for GDPR

IAB TCF Canada registered consent manager

受全球5000多家出版商和营销人员的信赖

开始使您的网站和应用符合欧盟 GDPR、美国 CPRA、加拿大 PIPEDA 等法规