Looking Ahead To Comprehensive State Privacy Bills In 2021 And Beyond

Since the start of 2021, at least 22 states have introduced sweeping consumer privacy bills. Many of these bills would include consumer rights modeled after privacy laws in California and Europe, such as the right to opt-out of certain data uses, and the rights to access, correct and delete one's personal information. Many companies have taken significant steps to comply with the California Consumer Privacy Act (CCPA), but obligations around consumer privacy are likely to grow as other states move forward with their own legislation, each with its own nuances. Following California's footsteps, the Virginia General Assembly passed – and Gov. Ralph Northam recently signed – comprehensive privacy legislation known as the Consumer Data Protection Act (CDPA) that will go into effect on Jan. 1, 2023.