The act authorizes an occupational therapist to perform dry needling on and after September 1, 2027, if the occupational therapist:Has the knowledge, skill, ability, and documented competency to perform the act;Has successfully completed a dry needling course of study that meets supervisorial, educational, and clinical prerequisites to be established by rule; andObtains a written informed consent from each patient for dry needling, including information concerning the potential benefits and risks of dry needling and a statement that the occupational therapist performing dry needling is not an acupuncturist. The act requires the director of the division of professions and occupations within the department of regulatory agencies to adopt rules to implement the authorization for an occupational therapist to perform dry needling. At a minimum, the rules must establish requirements for dry needling performed by an occupational therapist that are equivalent to the requirements in rules adopted by the state physical therapy board for dry needling performed by a physical therapist.(Note: This summary applies to this bill as enacted.)

The bill enacts the softbound volumes of the Colorado Revised Statutes 2025, the subsequent changes approved by the voters at the statewide election on November 4, 2025, and the 2025 Colorado First Extraordinary Session Supplement as the positive and statutory law of the state of Colorado and establishes the effective date of said publication.(Note: This summary applies to this bill as enacted.)

The bill prohibits law enforcement and other government entities from purchasing, or otherwise obtaining for anything of value, certain personal data from third parties. Law enforcement agencies and other government entities are also prohibited from sharing individuals' personal data between themselves.Exceptions are created for obtaining personal data, including after obtaining a judicial warrant, subpoena, or court order, when an individual consents to sharing their data and, in the case of an emergency, involving a threat to a person's life or physical safety.The bill creates a private cause of action for an individual who has their personal data obtained or shared in violation of the prohibitions in the bill. Personal data obtained or shared is excluded from trial and other court proceedings, subject to certain exceptions.(Note: This summary applies to this bill as introduced.)