HB 21-1111 Summary

• Chief Information Officer shall convene an advisory group to study where personally identifiable information is stored by Colorado state agencies and which entities have access to it.

• Advisory group composition includes members of the Government Data Advisory Board, one Attorney General's office representative, and personally identifiable information experts appointed by the Chief Information Officer.

• Advisory group must complete its work and present findings to the Joint Technology Committee by January 1, 2023, including legislative proposals if appropriate.

• "Personally identifiable information" is defined broadly to include names, dates of birth, social security numbers, driver's licenses, photographs, biometric data, financial records, medical information, immigration status, and other identifying information.

• The statute is repealed effective January 1, 2024, making this a temporary study and reporting requirement.