Monday, March 8, 2021
Virginia has enacted new privacy legislation that bears similarities to the California Consumer Privacy Act (the “CCPA”) and borrows some concepts from the European Union’s General Data Protection Regulation (the “GDPR”). In February, the Virginia legislature passed the Virginia Consumer Data Protection Act (SB No. 1392) (the “CDPA” or “Act”) and the governor signed the bill into law on March 2, 2021. This makes Virginia the second state in the country after California to adopt a comprehensive consumer privacy law. This article provides an overview of some of the key components of the CDPA.
To whom does the CDPA apply?
To embed, copy and paste the code into your website or blog:
On Tuesday, March 2, 2021, Virginia became the second U.S. state to enact a broad data privacy regime after Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law. Virginia follows California, which became the first state to pass a comprehensive data privacy law, the California Consumer Privacy Act (CCPA), in June 2018. The CCPA became operative January 1, 2020 after several amendments necessary for its implementation, which we previously covered here and here. (California is set to enact another privacy law entitled the California Privacy Rights Act (CPRA) - to update the CCPA in November 2020.) There is also a raft of other state privacy laws in the pipeline, and Virginia’s new law aligns with a trend toward states ratcheting up broadly applicable privacy-related legal obligations.
The Virginia Consumer Data Protection Act (CDPA) became law earlier this week when the state’s governor signed a bill recently adopted by the state’s legislature, making Virginia the.
Virginia Governor Signs Consumer Privacy Law
LIKESAVE
Reuse Permissions
Members may download one copy of our sample forms and templates for your personal use within your organization. Please note that all such forms and policies should be reviewed by your legal counsel for compliance with applicable law, and should be modified to suit your organization’s culture, industry, and practices. Neither members nor non-members may reproduce such samples in any other way (e.g., to republish in a book or use for a commercial purpose) without SHRM’s permission. To request permission for specific items, click on the “reuse permissions” button on the page where you find the item.
Blog
Blog
Blog
Blog
8 Mar, 2021 Author Casey Egan
First came California with its sweeping data privacy law. Then Virginia followed suit. Now, the only question is which state might be next.
Virginia Gov. Ralph Northam signed a sweeping piece of consumer data protection legislation into law this month, making Virginia the second state to pass a comprehensive data privacy law, according to privacy experts. The law, known as the Virginia Consumer Data Protection Act, gives consumers the ability to access, correct, delete and obtain a copy of personal data. It also enables consumers to opt out of having their personal data processed for targeted advertising purposes.