Skip to main content
Colorado General AssemblyToggle Main Menu
Agency NameToggle Agency Menu

Privacy of Biometric Identifiers & Data

Concerning protecting the privacy of an individual's biometric data.
2024 Regular Session
Civil Law
Public Health
Bill Summary

The bill amends the "Colorado Privacy Act" to add protections for an individual's biometric data by requiring a person that, alone or jointly with others, determines the purposes for and means of processing biometric data (controller) to adopt a written policy that:

  • Establishes a retention schedule for biometric identifiers;
  • Includes a protocol for responding to a breach of security of biometric identifiers or biometric data; and
  • Includes guidelines that require the permanent destruction of a biometric identifier by the earliest of certain dates.

The bill also:

  • Prohibits a controller from collecting a biometric identifier unless the controller first satisfies certain disclosure and consent requirements;
  • Specifies certain prohibited acts and requirements for controllers that collect and use process biometric identifiers and biometric data;
  • Requires a controller to allow a consumer to access and update a biometric identifier;
  • Restricts an employer's permissible reasons for obtaining an employee's consent for the collection of biometric identifiers; and
  • Authorizes the attorney general to promulgate rules to implement the bill.

(Note: Italicized words indicate new material added to the original summary; dashes through words indicate deletions from the original summary.)

(Note: This summary applies to the reengrossed version of this bill as introduced in the second house.)


Under Consideration


Bill Text

Upcoming Schedule



1:30 pm  |  Old Supreme Court

Colorado legislature email addresses ending in are no longer active. Please replace with for Colorado legislature email addresses. Details

The effective date for bills enacted without a safety clause is August 7, 2024, if the General Assembly adjourns sine die on May 8, 2024, unless otherwise specified. Details