Colorado proposes requiring data breaches to be reported in 30 days

The Colorado legislature is considering a bill that would improve the state’s privacy and data security law by giving organizations only 30 days to report a breach. The bill also expands the types of personal information covered and includes passwords and passcodes. If the bill passes, Colorado would join Florida as one of the toughest states on breach notification timelines. States are increasingly proposing modifications to privacy laws due to the rise in cyberattacks.