Home > Legal Updates > VIRGINIA BECOMES THE SECOND STATE TO PASS A COMPREHENSIVE PRIVACY LAW

VIRGINIA BECOMES THE SECOND STATE TO PASS A COMPREHENSIVE PRIVACY LAW

After passing with relative ease through Virginia’s House of Delegates and Senate, Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law on March 2, 2021. Virginia joins California as the only states in the nation to have passed comprehensive privacy legislation. Companies that are subject to the new law will have to comply beginning January 1, 2023, the date when the law goes into effect. Companies should note that this date coincides with the effective date of the new substantive obligations set forth in the California Privacy Rights Act (CPRA), the recently passed ballot initiative amending the California Consumer Privacy Act (CCPA), as discussed in our previous alert.

While the new Virginia law creates a hybrid model that borrows liberally from the CCPA and CPRA, as well as the EU’s General Data Protection Regulation (GDPR), it also contains many unique elements that diverge from these counterparts. Read more…