When Colorado’s state legislature introduced their current consumer data privacy law back in 2018, it was hailed as one of the strictest in the country. Now that assessment feels quaint, as dozens of other states have passed — or are working on — data privacy laws that equal or surpass Colorado’s in terms of toughness.
Still, Colorado’s law — officially known as House Bill 18-1128 — places the burden of consumer privacy squarely on businesses, and opens the door to fines and lawsuits for non-compliance.
And, unlike other state laws such as California’s CCPA, the Colorado law doesn’t make any exemptions for small businesses.
Auto and truck dealers are especially susceptible to cyber attacks and data breaches. Dealers in Colorado should familiarize themselves with the law, ensure they are in compliance, and if not, take steps to update their cybersecurity as quickly as possible.