[co-author: John Pilch] Rarely do Virginia and California fall into the same camp on legislation, but that may change with Virginia’s Consumer Data Privacy Act (the “Act”). The Virginia House of Delegates overwhelmingly passed the Act on January 29 th, and the Virginia Senate passed an identical companion bill on February 3 rd. If signed into law by Governor Northam, the Act would make Virginia the second state in the U.S. to enact sweeping consumer data privacy legislation. The Act adopts consumer privacy concepts from the California Consumer Privacy Act (CCPA), the new California Privacy Rights Act (CPRA), and Europe’s General Data Protection Regulation (GDPR), including: