4 Colo. Code Regs. § 904-3-6.04

Current through Register Vol. 47, No. 20, October 25, 2024

Section 4 CCR 904-3-6.04 - CHANGES TO A PRIVACY NOTICE

A. A Controller shall notify Consumers of material changes to a privacy notice. Such changes to a privacy notice shall be communicated to Consumers in a manner by which the Controller regularly interacts with Consumers.

1. Material changes may include, but are not limited to, changes to:

(1) categories of Personal Data Processed;

(2) Processing purposes;

(3) a Controller's identity;

(4) the act of sharing of Personal Data with Third Parties;

(5) categories of Third Parties Personal Data is shared with; or

(6) methods by which Consumers can exercise their Data Rights request.

B. If a material change rises to the level of a secondary use, a Controller must obtain Consent from a Consumer pursuant to 4 CCR 904-3, Rules 7.02 -7.05 in order to Process Personal Data that was collected before the change to the privacy notice for that Secondary Use.

4 CCR 904-3-6.04

46 CR 06, March 25, 2023, effective 7/1/2023