On March 2, 2021, Virginia enacted the Consumer Data Protection Act (“VCDPA”). The VCDPA will become effective January 1, 2023. The VCDPA shares its roots with the California Consumer.
To print this article, all you need is to be registered or login on Mondaq.com.
On March 2, 2021, Virginia Governor Ralph Northam signed into
law the Consumer Data Protection Act (the VCDPA or the Act), making
Virginia the second state, following California, to grant consumers
broad privacy rights with respect to their personal information as
collected by businesses both within and outside the state. The
VCDPA will not take effect until January 1, 2023, but businesses
should begin now to assess their potential coverage and to map out
a plan for compliance.
Many businesses may have a head start on compliance if they have
To embed, copy and paste the code into your website or blog:
Earlier this week, the Commonwealth of Virginia became the second state to enact comprehensive consumer data privacy legislation, joining California. On March 2, Governor Ralph Northam signed the Consumer Data Protection Act (CDPA) into law, as he was widely expected to do. The CDPA garnered widespread support in Virginia’s House and Senate and was pushed across the goal line in Richmond relatively quickly.
The CDPA establishes a framework for controlling and processing personal data in Virginia. At a high level, it:
Applies to an entity or individual that conducts business in Virginia or targets their products or services to Virginia residents and that meets minimum thresholds for controlling and processing (or selling) personal data;