On March 2, 2021, Virginia Gov. Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law, making Virginia the second state to have comprehensive data privacy legislation on the books. The CDPA is similar to the privacy regime enacted under the California Consumer Privacy Act (CCPA) and expanded under the California Privacy Rights Act (CPRA). Indeed, Virginia’s CDPA and the CPRA will take effect on the same day, Jan. 1, 2023.
Virginia Enacts Comprehensive Data Privacy Legislation
