Last month, Governor Ralph Northam signed the Virginia Consumer Data Protection Act into law, making Virginia the second state in the nation to enact comprehensive data privacy legislation.
The Act resembles and adopts some terms from the California Consumer Privacy Act, the California Privacy Rights Act of 2020, which amends and expands the CCPA, and the European Union’s General Data Protection Regulation; however, the Act contains a number of distinctive provisions, compliance with which will require covered entities to adjust their privacy policies and practices, even if they are already CCPA and GDPR compliant, rendering the existing patchwork of state and national privacy laws even more complex.
Please click here to read the full alert memorandum