Starting July 1, 2025, Colorado’s Biometric Data Privacy Amendment introduces strict requirements for collecting
biometric data from individuals, including employees and job applicants. Employers must obtain limited-purpose
consent, follow a strict data deletion timeline, and implement a biometric-specific incident response protocol. Two
consent exceptions exist but carry legal risks, especially for multistate employers. The law is enforced by state
authorities and requires companies to audit current practices, update policies, and train staff accordingly.

Read More Here.