On March 2, 2021, Governor Northam made Virginia the second state in the U.S. to enact a comprehensive privacy law, Virginia's Consumer Data Protection Act, regulating data related to Virginia residents in their individual or household capacity.
(Richmond)- Virginians will be able to opt out of having their consumer data collected and sold by companies. Governor Northam signed the Consumer Data Protection Act, making Virginia only the second state to have such a law, after California. The law requires companies to get permission before collecting information including racial or ethnic origin, genetics and location. It's set to take effect in 2023.
Legal Disclaimer
You are responsible for reading, understanding and agreeing to the National Law Review s (NLR’s) and the National Law Forum LLC s Terms of Use and Privacy Policy before using the National Law Review website. The National Law Review is a free to use, no-log in database of legal and business articles. The content and links on www.NatLawReview.com are intended for general information purposes only. Any legal analysis, legislative updates or other content and links should not be construed as legal or professional advice or a substitute for such advice. No attorney-client or confidential relationship is formed by the transmission of information between you and the National Law Review website or any of the law firms, attorneys or other professionals or organizations who include content on the National Law Review website. If you require legal or professional advice, kindly contact an attorney or other suitable professional advisor.
To embed, copy and paste the code into your website or blog:
Virginia’s Consumer Data Protection Act (CDPA) was signed into law by Gov. Ralph Northam on March 2, 2021. While the CDPA will not take effect until January 1, 2023, businesses should start integrating their distinct obligations into their privacy compliance frameworks while recognizing the differences between the CDPA and existing regulations, such as the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the European Union’s General Data Protection Regulation (GDPR), and Brazil’s General Data Protection Law (LGPD).
The following highlights some key questions and considerations for businesses collecting, maintaining, and storing the personal information of Virginia individuals and households.