Colorado AG Published an Update to the Draft Rules to the CPA
The second version of the draft CPA rules include updated definitions, removing the requirement that privacy notices be purpose-based, changing data protection assessment requirements, and relaxing conditions on when businesses have to seek refreshed consumer consent.