Virginia is for lovers (of privacy)—The Consumer Data Protection Act passes into law
Posted on Mar 4, 2021 in Cybersecurity, Data Privacy, Government, Regulation | Comments Off on Virginia is for lovers (of privacy)—The Consumer Data Protection Act passes into law
On March 2, 2021, Governor Northam signed the Virginia Consumer Data Protection Act (CDPA), making it the country’s second, enhanced state privacy law. It will likely not be the last.
- Set to take effect on January 1, 2023, the CDPA requires businesses to make significant enhancements to their privacy policies and to provide covered consumers with substantial rights.
- Many obligations and rights are similar—but not necessarily identical—to those required by other enhanced privacy laws like the California Consumer Privacy Act (CCPA) or Europe’s General Data Protection Regulation (GDPR).
- While there is no private right of action, regulatory enforcement penalties can be high.
Learn more.
