On July 7, 2021, Colorado became the third US state to enact a comprehensive data privacy law, known as the Colorado Privact Act (CPA). The CPA, like many other privacy laws, was influenced by the EU's GDPR. The CPA provides similar protections to those provided by the CCPA and the VCDPA, but this white paper demonstrates the differences between CPA and its predecessor state laws. This whitepaper summarizes operative definitions, the jurisdictional scope and application, and consumer rights under the CPA. It is a valuable resource to review to ensure compliance in 2023.