A 2021 Colorado law modified many of the statewide data practices by specifying requirements regarding the creation of a data-sharing and privacy master plan and sharing personal identifying information between state agencies. Moreover, it codified the “share first” expectation (24-37.5-704 C.R.S) for data sharing statewide, specifically that, except where prohibited by state or federal law, agencies are preemptively authorized to share data with other state agencies, legislative and judicial branches, political subdivisions, and non-governmental organizations. Additionally, to enhance data privacy measures, in May 2020, the Governor published guidance on data privacy with respect to state agencies sharing personal identifying information with the federal government or other third parties, some of which was codified into law in the 2021 legislative session.