Colorado Privacy Act: Processor and Assessments (6-1-1305/1309)
Colorado Privacy Act COPA-1305-PROCESSOR: Processor Contracts and Role Responsibility
Processing by a processor must be governed by a contract that sets out instructions, nature/purpose, data types, duration, and obligations (confidentiality, sub-processor flow-down, deletion/return, audits, assistance).
Other controls in Colorado Privacy Act: Processor and Assessments (6-1-1305/1309)