What the Virginia CDPA Means for State and Local Governments

May 3, 2021


On March 2, 2021, Virginia’s Consumer Data Protection Act (CDPA) was signed into law, making Virginia the second state to enact comprehensive privacy legislation, after California.

According to the law, it “establishes a framework for controlling and processing personal data in the Commonwealth” of Virginia. It aims to provide guidance for the organizations that process or gain revenue from consumer data. The law specifically focuses on consumer data, but it lays the groundwork for future privacy acts and will impact most Virginians in some capacity.