The Commonwealth of Virginia passed the Consumer Data Protection Act (CDPA) into law on March 2, 2021. The November 2020 election results provided the much-needed impetus to strengthen consumer privacy for the Commonwealth of Virginia. Now that the bill is enacted, Virginia becomes the second U.S. state behind California to institutionalize a comprehensive consumer privacy law for businesses to govern, control and lawfully process personal information of Virginia’s residents. The law goes into effect on January 1, 2023.
In this Flash Report, Protiviti cites and summarizes key requirements contained in the new law, along with notable takeaways.