On May 29, 2018, the governor of Colorado signed into law HB 18-1128 (the “Privacy Law”), which made sweeping changes to Colorado’s data privacy laws and which will affect nearly every Colorado business and government entity. The Privacy Law imposes new requirements on any person or entity that maintains, owns, or licenses personal information concerning Colorado residents, including health care entities that are “covered entities” for the purposes of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). The Privacy Law’s new requirements will take effect on September 1, 2018.