Photo of David Stauss

David guides clients as they navigate the complexities of privacy and cyber law. His straightforward advice and thorough approach are a benefit to clients as they confront their toughest challenges.

In this episode of Regulatory Oversight, host Ashley Taylor is joined by Colorado Senate Majority Leader Robert Rodriguez and Troutman Pepper Locke Privacy + Cyber partner David Stauss for an in‑depth discussion of the Colorado AI Act — widely viewed as the nation’s first comprehensive legislative framework focused on high‑risk AI systems and algorithmic discrimination. Senator Rodriguez explains how Colorado’s work on consumer privacy laid the groundwork for AI regulation and walks through the origins, goals, and core provisions of the Act, including its emphasis on transparency, risk assessments, and protecting consumers in sectors such as employment, housing, health care, education, finance, and government services.

Key point: The investigative sweep is part of a growing multistate approach to privacy enforcement actions.

On September 9, the California Privacy Protection Agency (CPPA) announced that it has initiated a joint regulatory sweep in collaboration with attorneys general (AG) from California, Colorado, and Connecticut. The sweep will target businesses’ compliance with legal requirements associated with recognition of opt-out preference signals (OOPS) and universal opt-out mechanisms (UOOMs) that consumers can use to exercise their right to opt out of online tracking technologies (i.e., targeted advertising, sales, or sharing).