On March 2, 2021, Virginia's governor, Ralph Northam, signed
the Virginia Consumer Data Protection Act (CDPA, or the Act) into
law. The CDPA is set to take effect on January 1, 2023, and is the
second comprehensive consumer privacy law to be enacted in the
United States behind the California Consumer Privacy Act (CCPA),
recently amended by the California Privacy Rights Act (CPRA). The
CPRA, which is discussed at length on
technologylawdispatch.com, is also set to take effect on
January 1, 2023.
In short, the CDPA works to establish a comprehensive framework
for controlling and processing personal data in Virginia, drawing
on both the CCPA/CPRA and the European Union's General Data
Protection Regulation (GDPR).
