Virginia Will Likely Be The Second State To Pass Privacy Legislation

The Virginia state House of Delegates and Senate voted to approve data privacy legislation, titled the Consumer Data Protection Act (”CDPA”). Now, legislators are working to send the bill to Virginia Governor Ralph Northam, before March 1, 2021.

If enacted, the CDPA would go into effect on January 1, 2023 and would apply to all businesses that: (1) control or process personal data of at least 100,000 Virginia residents or (2) derive over 50% of gross revenue from the sale and processing of personal data of at least 25,000 Virginia residents. The CDPA has exemptions for certain financial institutions, health care institutions, non-profit organizations, and higher education institutions.