Colorado continues to sharpen its privacy regime. Since adopting its privacy act (CPA), which took effect in 2023, the state has steadily refined both the statute and its regulations. Colorado Assistant AG Andrea Lowe, speaking at the Bridge 2026 privacy summit, walked through the latest CPA amendments on strengthening protections for biometric data, minors and other sensitive information, and outlined the AG’s enforcement priorities. She highlighted multistate coordination, the investigatory sweep on global privacy controls, and heightened scrutiny of sensitive data, mobile apps and data protection assessments. This article distills her comments. See “Colorado Privacy Law Finishes Third, but Could Become the New Standard” (Jun. 23, 2021).