Virginia Becomes a Leader in Privacy Regulation

Yesterday, Virginia Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law.  This news comes shortly after Virginia’s Senate and House of Delegates agreed upon final changes to the CDPA and sent it to the governor’s desk.  The CDPA will give Virginia consumers new rights – including the right to access, the right to correct, the right to delete, the right to data portability, and the right to opt-out of the processing of personal data – and will obligate businesses to provide secure mechanisms by which consumers may exercise these rights.  The law will not provide consumers a private right of action.  The CDPA will go into effect on January 1, 2023, giving enforcement authority to the Virginia Attorney General.  You can find more information about the CDPA here.

For further information about the CDPA or privacy laws in general, please contact John Landolfi, Christopher Ingram, Christopher LaRocco, Sarah Boudouris, Gretchen Rutz, or your Vorys attorney.