To embed, copy and paste the code into your website or blog:
Earlier this week, the Commonwealth of Virginia became the second state to enact comprehensive consumer data privacy legislation, joining California. On March 2, Governor Ralph Northam signed the Consumer Data Protection Act (CDPA) into law, as he was widely expected to do. The CDPA garnered widespread support in Virginia’s House and Senate and was pushed across the goal line in Richmond relatively quickly.
The CDPA establishes a framework for controlling and processing personal data in Virginia. At a high level, it:
Applies to an entity or individual that conducts business in Virginia or targets their products or services to Virginia residents and that meets minimum thresholds for controlling and processing (or selling) personal data;
[co-author: Rod Ghaemmaghami]
On March 2, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (VCDPA) into law, making Virginia the second state to enact comprehensive privacy legislation.
With the VCDPA on the books, companies have the next 22 months to prepare for the VCDPA
and the California Privacy Rights Act (CPRA) to go into effect. This post takes a look at the VCDPA provisions that are novel and require close attention during the transition period to the law’s January 1, 2023 effective date.
Sensitive Data: The VCDPA breaks new ground in U.S. privacy law by requiring consent to process “sensitive data” – a term that includes precise geolocation data; genetic or biometric data used to identify a person; and data revealing race or ethnicity, religious beliefs, health diagnosis, sexual orientation, or citizenship or immigration status. The definition of “consent,” in turn, tracks the GDPR definition: “freely given, specific, informed, and u
(MENAFN - Khaleej Times) The Office of Data Protection (ODP) of Abu Dhabi Global Market (ADGM), an international financial centre in the Mena region, has become the first data protection regulator in the Gulf region to join the Global Privacy Assembly s International Enforcement Cooperation Working Group (IECWG).
The IECWG is a permanent working group of the Global Privacy Assembly. Its purpose is to facilitate and support enforcement cooperation on live cases impacting multiple jurisdictions. The IECWG is co-chaired by the Canadian Office of the Privacy Commissioner (OPC), the United Kingdom s Information Commissioner s Office (ICO) and the United States Federal Trade Commission (FTC).
To embed, copy and paste the code into your website or blog:
Virginia is for lovers and, in the near future, may be for privacy as well, as the Commonwealth’s legislature is currently considering adopting its own comprehensive consumer data privacy law: The Consumer Data Protection Act (CDPA).
The CDPA, which would establish a framework for controlling and processing personal data in Virginia, is comprised of House Bill 2307 and Senate Bill 1392, and appears to be close to crossing the goal line in Richmond. The House passed its bill on January 29, 2021, and subsequently referred it to the Senate Committee on General Laws and Technology on February 1. Similarly, the Senate unanimously passed its bill on February 3, and it was referred to the House Committee on Communications, Technology and Innovation on February 7. All that remains now is for the House and Senate to complete the reconciliation process and present the legislation to Governor Ralph Northam for his approval, which