Virginia Privacy Law: A 2023 VCDPA Overview

As of January 1, 2023, the Virginia Consumer Data Protection Act (VCDPA), has taken full effect in the Commonwealth. The primary goal of the act is to bring Virginia's citizen protection up to speed with the challenges of modern life on the internet. Data protection and privacy are emerging areas of the law that will continue to expand and generate problems and challenges for both businesses and citizens in the Commonwealth, both now and into the foreseeable future. This blog summarizes some of the key features of the CDPA as it currently stands in Virginia.

What is the VCDPA, and to Whom Does It Apply?

The principal aspects of the VCDPA include expanded consumer privacy rights, a comprehensive definition of personal information, the creation of sensitive data in protection, and data protection requirements for those who manage and control data.¹The VCDPA applies to persons who conduct business in the Commonwealth or produce products or services that are targeted