Legislature Finalizes Virginia Privacy Law For 2023 Debut

Last year, Virginia passed the Consumer Data Protection Act ("CDPA"), marking the Commonwealth's entry into the state data privacy law field. The Virginia privacy law goes into effect January 1, 2023. In this year's legislative session, the Commonwealth passed important amendments to the CDPA. With no regulatory body involved in implementing the CDPA, these amendments will likely be the final changes to the law prior to its going into effect at the beginning of next year.

How do the 2022 amendments affect the Virginia privacy law?

The Virginia legislature made two substantive amendments to the CDPA in 2022:

• Expanding the definition of nonprofit organizations exempt from the law; and