Colorado is poised to pass the third U.S. state privacy law, pending its governor’s approval. The Colorado Privacy Act, which would come into effect July 2023, specifies that Colorado residents be allowed to opt out of data collection for ad targeting; imposes a duty of care in which companies must obtain consumer consent before collecting or using sensitive data; and,  restricts data controllers from using data other than for purposes for which it was collected.   No right of private action.