Allowing private right of action means this will be weaponized by attorneys in the same way the ADA has. Just scanning the bill, any small business in the US using dynamic pricing, targeted discounts or "VIP pricing" on their website would be open to suits from Colorado residents. The definitions are extremely broad and there is no safe harbor for small companies either. Damages are also uncapped and apparently Colorado allows treble damages for CCPA violations.
> any small business in the US using dynamic pricing, targeted discounts or "VIP pricing" on their website would be open to suits from Colorado residents
The solution is to use reasonable efforts to block Colorado residents if you can’t comply with the law. That’s a tradeoff a group of people are allowed to make for themselves.
