Photo of Elizabeth (Liz) Harding

Elizabeth (Liz) Harding

Elizabeth (Liz) Harding helps organizations protect and commercialize of their data assets. Liz is qualified in Colorado and the United Kingdom, and has over 20 years of experience focusing on privacy and data matters, including deep familiarity with the GDPR, CCPA, and various other U.S. federal, state, and international privacy and cybersecurity regulations.

Liz applies a risk based approach to privacy compliance, marrying deep technical know-how with industry experience. She supports clients across a wide array of industries including advertising, media and telecommunications, entertainment, financial services, health care, hospitality, retail, education, AI, and cloud based technology.

The effective date for Colorado’s groundbreaking Artificial Intelligence Act has been pushed back by five months, now set for June 30, 2026. Gov. Jared Polis signed amendments after extensive debate in a special legislative session, giving lawmakers more time to address substantive concerns. With continued disagreement among stakeholders, it remains uncertain if further changes will be made before the new deadline.
Continue Reading Colorado Delays Comprehensive AI Law With Further Changes Anticipated

The UK’s Data (Use and Access) Act 2025 (the Act) officially came into law on June 19. The Act seeks to modernize the UK’s data protection and e-privacy regimes.

Continue Reading UK Data (Access and Use) Act 2025: Key Changes Seek to Streamline Privacy Compliance

On Jan. 17, 2025, EU Regulation 2022/2554 on digital operational resilience for the financial sector (DORA) became applicable in the EU.

DORA focusses on risk management and resilience testing, with a strong focus on vendor risk management, incident management and reporting, and resilience testing of key systems.

DORA applies to financial institutions that are authorized

Some 18 months on from the failed American Data Privacy and Protection Act (ADPPA), there is another proposed federal privacy law. House and Senate committee leads released a new proposal for the bipartisan American Privacy Records Act (APRA) on April 7. There is a lot of discussion around this bill, which is subject to change