Colorado mulls data privacy rule