DENVER—Today, the House of Representatives unanimously passed legislation that will help protect citizens’ electronically-held personal information. House Bill 18-1128, sponsored by Representative Cole Wist (R-Centennial), requires government and private entities to develop policies for the safe retention and disposal of records that contain personal identifying information as well as the prompt notification if a breach has occurred.

“Having been a victim of identity theft, I believe it’s incumbent upon any entity that has personal information in their possession to take adequate security measures and immediately notify people if that information is compromised,” said Wist. “This bill is about common-sense security policies, and I am confident it will greatly help protect Coloradans’ online data.”

Specifically, the bill requires each governmental and private entity in the state that maintains data containing personally identifying information to: develop a written policy ensuring all unneeded records are completely destroyed and rendered unreadable; implement and maintain adequate security measures against data breaches; notify affected individuals if a breach has compromised their personal information no later than 30 days after the breach; and notify the Colorado Attorney General within 30 days if the breach is believed to have affected 500 or more people.

House Bill 18-1128 now heads to the Senate for further consideration.