To embed, copy and paste the code into your website or blog:
On March 2, 2021, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (“VCDPA”) into law. This made Virginia the second state to enact a consumer privacy and data security law, following in the footsteps of the California Privacy Rights and Enforcement Act (“CPRA”). Virginia will not be the last to regulate the relationship between consumers and businesses holding their data; Colorado has already become the third state to pass such a measure, and New Jersey, New York, Washington, Minnesota, Oklahoma, and others have bills under consideration. Virginia’s recent action is relevant beyond its borders, becoming the model for proposed legislation in Utah and raising the profile of long-stalled congressional data privacy efforts.