Colorado working on data privacy laws