To embed, copy and paste the code into your website or blog: With incredible speed, Virginia became the second state in the United States with a comprehensive data privacy law. Virginia’s law is called the Consumer Data Protection Act (CDPA). The CDPA is effective January 1, 2023, giving covered businesses a moment to catch their collective breaths and revise their privacy policies and vendor contracts, conduct the required data protection assessments, and design processes for consumers to exercise their rights to access, know, correct, port and delete, opt-in to processing of “sensitive” data, and opt-out of targeted advertising, the sale of personal data, and certain profiling.