Colorado became the third state to enact a comprehensive privacy law. The Colorado Privacy Act CPA has elements in common with the California Consumer Privacy Act CCPA and California Privacy Rights Act CPRA and largely tracks the new Virginia Consumer Data Protection Act VCDPA.