By Aaron Nicodemus2021-03-03T16:02:00+00:00 In what might be a sign of things to come for data privacy legislation nationwide, Virginia passed the country’s second comprehensive data privacy law Tuesday. Virginia Gov. Ralph Northam (D) signed the Consumer Data Protection Act (H 2307) into law. The CDPA will take effect Jan. 1, 2023. The state data privacy movement started in California, which put the nation’s first comprehensive data privacy law, the California Consumer Privacy Act (CCPA), into effect in January 2020. In November, California voters passed the California Privacy Rights Act (CPRA), which builds on the CCPA. Like the Virginia law, the CPRA takes effect in January 2023.