Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 07 MARCH 2021

Virginia Becomes The Second State To Pass A Comprehensive Privacy Law

Davis+Gilbert LLP
Davis+Gilbert LLP
Contributor
Davis+Gilbert LLP

Davis+Gilbert LLP

Legal mastery is critical but not enough. Even the best legal strategies must work in tandem with...

View firm profile
Explore more from Davis+Gilbert LLP

After passing with relative ease through Virginia's House of Delegates and Senate, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law on March 2, 2021.

United StatesPrivacy
Richard Eisert
Richard Eisert
Gary Kibel
Gary Kibel
Author LinkedIn connections

After passing with relative ease through Virginia's House of Delegates and Senate, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law on March 2, 2021. Virginia joins California as the only states in the nation to have passed comprehensive privacy legislation. Companies that are subject to the new law will have to comply beginning January 1, 2023, the date when the law goes into effect. Companies should note that this date coincides with the effective date of the new substantive obligations set forth in the California Privacy Rights Act (CPRA), the recently passed ballot initiative amending the California Consumer Privacy Act (CCPA), as discussed in our previous alert.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

California Signs Landmark Online Child Safety Package

California has enacted the nation's most comprehensive online child safety legislation, banning addictive social media features for minors under 16, establishing strict companion chatbot regulations, and imposing enhanced civil penalties for platforms that harm children. Companies operating social media platforms or chatbots accessible to California children must now assess their products, audit features, and prepare compliance programs ahead of the laws' effective dates.
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Becomes Second State To Require Disclosure Of Synthetic Performers In Advertising

California joins New York in mandating disclosure when AI-generated synthetic performers appear prominently in advertisements, establishing specific language requirements and broad enforcement mechanisms. The law creates new compliance obligations for advertisers, agencies, and media platforms while introducing nuanced differences from New York's framework. With the January 2027 effective date approaching, businesses must implement tracking systems and disclosure procedures to navigate this expanding regula
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

EU AI Act Guidance Expands AI Disclosure Rules For Advertisers And PR Teams

The European Union's AI Act introduces sweeping transparency requirements for AI-generated content, fundamentally redefining what constitutes a "deep fake" and imposing disclosure obligations that extend far beyond traditional understanding. With enforcement beginning August 2, 2026, companies using AI to create advertising, marketing materials, or public communications must navigate complex compliance requirements that may apply even to organizations with no physical presence in Europe.
European UnionMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

NYC’s “Click To Cancel” Rule Is Now In Effect: What Subscription Businesses Need To Know

New York City has become the first U.S. municipality to enforce its own subscription cancellation requirements, creating a new compliance layer for businesses with NYC subscribers. The rule prohibits unreasonable barriers to cancellation and requires companies that enroll consumers in person to offer online cancellation options. With complaint-driven enforcement, per-violation fines up to $3,500, and restitution measured from the first cancellation attempt, businesses must now navigate city-level regulation
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

FTC Continues Crackdown On Subscription Businesses

The Federal Trade Commission has filed a sweeping complaint against Genesis Tech and related entities, alleging systematic deception in subscription funnels that lure consumers with free or low-cost offers while obscuring auto-renewal terms. The enforcement action signals heightened scrutiny of end-to-end consumer journeys, challenging not just missing disclosures but the overall impression created by quizzes, personalization claims, and pricing language that suggests one-time purchases. What compliance ris
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Poised To Narrow The Reach Of The California Invasion Of Privacy Act

California's Senate Bill 690 represents a pivotal legislative response to the explosion of website-tracking lawsuits under the California Invasion of Privacy Act, specifically targeting claims brought under the pen-register provision that have generated thousands of cases since 2022. While the bill would eliminate private plaintiffs' ability to pursue these particular claims involving digital tracking technologies, it leaves other CIPA provisions intact and raises questions about how the litigation landscap
United StatesPrivacy
Davis+Gilbert LLP
Davis+Gilbert LLP