Colorado becomes latest state to pass data privacy law