CO HB1244

Prohibits private covered entities from collecting, storing, or using biometric identifiers of Colorado consumers without providing notice, obtaining clear affirmative consent, and informing consumers they can revoke consent at any time.

Requires covered entities to cease collection within 30 days and delete or destroy biometric identifiers if a consumer revokes consent, with violations constituting unfair or deceptive trade practices.

Prohibits governmental entities from acquiring, possessing, or using biometric identifiers or biometric surveillance systems unless specifically authorized by statute, with statutory authorization requiring minimum standards for accuracy, data management, due process protections, and equity safeguards.

Prohibits governmental entities from selling, releasing, or disclosing biometric identifiers unless required by court order, state or federal law, or the subject individual provides written consent; and from acquiring biometric information from third parties unless authorized by court order.

Establishes a private right of action allowing individuals to sue governmental entities for violations, with courts authorized to award actual damages, punitive or exemplary damages, reasonable attorney fees and costs, and injunctive relief.