West Coast, East Coast, and Now Mountains, Too: Colorado Joins the Comprehensive State Privacy Law Club
Data Matters
JULY 28, 2021
The CPA, like the CPRA and VCDPA, exempts certain categories of data, including data that is deidentified. Notably, the CPA exempts data “created by a covered entity for the purposes of complying with HIPAA” but does not have an entitywide exemption for Health Insurance Portability and Accountability Act (HIPAA)-regulated entities.
88 
Let's personalize your content