New Virginia Privacy Law Coming Soon

Both houses of the General Assembly of Virginia recently passed versions of the Consumer Data Privacy Act ("CDPA" or "Virginia Privacy Law"). Both the House Bill and Senate Bill would impose strict new requirements on businesses that share the personal information of Virginia State residents. Although Virginia is one of many states to have introduced privacy legislation in recent months, only California has actually enacted privacy legislation into law. If the Virginia Privacy Law passes, Virginia will become the second state in the nation with a comprehensive privacy law.

What Does the CDPA Require? 

Compliance with the CDPA

The CDPA would apply to people and businesses that "conduct business in the Commonwealth or "produce products or services that are targeted to" Virginia State residents and: 1) "control or process personal data of at least 100,000" Virginians during a calendar year; or 2) "control or process personal data of at least 25,000 [Virginians]