A law that grants Colorado residents rights over their personal data and imposes data protection obligations on businesses, effective from July 2023.