With the passage of the Consumer Data Protection Act (“VCDPA”), Virginia is the first state to follow California’s lead in passing a comprehensive consumer privacy bill. When this legislation goes into effect on January 1, 2023, it will impose sweeping data protection and privacy requirements upon select organizations processing the data of Virginia consumers. The VCDPA is similar in many ways to the California Consumer Protection Act (“CCPA”), which was passed in June 2018 and which was strengthened by the California Privacy Rights Act (“CPRA”), passed by voters November 2020. California’s enhanced CPRA, like the VCDPA, is due to take effect in 2023.
