GDPR. CCPA. CPRA. And now⦠CDPA? Data privacy law acronym bingo lives another day. Virginia this month passed the Consumer Data Protection Act (CDPA). The bill grants consumer rights to access, correct, delete and obtain a copy of personal data and to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data or profiling of the consumer. It marks the fourth comprehensive state consumer data privacy legislation in the United States, joining California, Maine and Nevada. The bill becomes effective Jan. 1, 2023. Turns out thatâs the start of a big year for marketers because the California Privacy Rights Act (CPRA), which extends provisions of the California Consumer Privacy Act (CCPA), becomes fully operative that day.