Colorado Privacy Act biological and neural data amendment (Protect Privacy of Biological Data)

HB 24-1058 made Colorado the first state to add neural data to its privacy law. It defines biological data (including neural data) and treats it as sensitive data, so controllers need opt-in consent and a data protection assessment to process it.