Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 13 JANUARY 2023

Virginia's Data Privacy Law Just Went Into Effect – What You Should Know

Butler Snow LLP
Butler Snow LLP
Contributor
Butler Snow LLP

Butler Snow LLP

Some law firms promise client service. Butler Snow delivers on that promise. Surveys by respected...

View firm profile
Explore more from Butler Snow LLP

The Virginia Privacy Law applies to businesses that conduct business in Virginia.

United StatesPrivacy
Melody McAnally
Melody McAnally
Author LinkedIn connections

On January 1, 2023, Virginia's Consumer Data Protection Act ("Virginia Privacy Law") went into effect, the second in the US aimed to protect consumers' personal data. We previously blogged about its passage. Here's what you should know.

Who's Covered.

The Virginia Privacy Law applies to businesses (called "controllers") that conduct business in Virginia. It can apply to businesses that are not headquartered, incorporated or located in Virginia if they offer products or services targeted to Virginia residents and that (1) control or process personal data of at least 100,000 Virginia residents in a calendar year or (2) control or process the personal data of at least 25,000 Virginia residents and derive more than half their gross revenue from the sale of personal data.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California Governor Signs Legislation Curtailing CIPA Website Claims

Businesses operating websites and mobile applications have faced a growing wave of lawsuits under the California Invasion of Privacy Act (CIPA), a 1967 statute enacted long before the modern internet. Plaintiffs increasingly argue that common website technologies—including cookies, pixels, and analytics tools—violate CIPA provisions originally aimed at wiretapping, eavesdropping, and pen registers.
United StatesPrivacy
Butler Snow LLP
Butler Snow LLP
Article

Texas Data Center Policy: What Has Changed And What To Watch

Texas is ramping up oversight of data center projects as Governor Abbott's directive adds new review requirements to an already complex interconnection process. The policy debate now encompasses transmission infrastructure, water resources, tax incentives, and community impacts. With the 2027 legislative session approaching, stakeholders in Texas's booming data center industry face an evolving regulatory landscape that could fundamentally reshape how large-scale digital infrastructure projects are developed
United StatesEnergy and Natural Resources
Butler Snow LLP
Butler Snow LLP
Article

TDEC Adopts Amendments To Its Aquatic Resource Alteration Permit (ARAP) Regulations Providing Clarity And Reducing Regulatory Barriers To Development In Tennessee.

Tennessee's Board of Water Quality, Oil and Gas has adopted significant amendments to the state's Aquatic Resource Alteration Permit rules, fundamentally changing how isolated wetlands are regulated following the Supreme Court's Sackett decision. The new regulations establish a tiered system for wetland alterations based on ecological quality, with streamlined permitting processes and expanded exemptions for certain construction activities. These changes promise to reduce regulatory burden on developers whi
United StatesEnvironment
Butler Snow LLP
Butler Snow LLP
Article

New Federal Policy Prohibits Certain Gain-of-Function Research And Restricts Certain International Projects

The U.S. government has released a sweeping new policy that prohibits federal funding for "dangerous gain-of-function research" and establishes unprecedented oversight requirements for life sciences research involving biological agents. Research institutions must now evaluate all proposed and ongoing federally funded projects against expanded risk criteria, implement new review structures, and monitor even non-federally funded research...
United StatesFood, Drugs, Healthcare, Life Sciences
Butler Snow LLP
Butler Snow LLP
Article

How OIG Used Data Analytics And Extrapolation In A $12.4 Million Hospital Audit

An HHS Office of Inspector General audit of Methodist Hospital in San Antonio reveals how a review of just 100 claims led to a $12.4 million overpayment recommendation through statistical extrapolation. The audit targeted specific high-risk billing areas including Inpatient Rehabilitation Facility claims, certain diagnosis-related groups, and outpatient billing patterns, uncovering documentation and coding compliance issues that hospital leadership should examine within their own Medicare claims.
United StatesAccounting and Audit
Butler Snow LLP
Butler Snow LLP
Article

NIH Proposes New Requirement To Share Study Results With Research Participants

The National Institutes of Health has issued a Request for Information on a draft policy that would mandate researchers share plain-language study results with clinical research participants. The proposed requirement would apply broadly to all NIH-supported clinical research and could create significant operational challenges for academic medical centers with large research portfolios. Public comments are due October 26, 2026, providing institutions an opportunity to address practical implementation concern
United StatesGovernment, Public Sector
Butler Snow LLP
Butler Snow LLP
Article

Governor Abbott Directs Review of Data Centers Seeking ERCOT Grid Connection

Governor Greg Abbott has directed Texas energy regulators to conduct a comprehensive verification and audit of data center projects in ERCOT's interconnection queue. With approximately 90 percent of the 474 gigawatts in connection requests tied to data centers, this directive aims to ensure all projects meet applicable requirements before advancing through the interconnection process.
United StatesEnergy and Natural Resources
Butler Snow LLP
Butler Snow LLP