Virginia Consumer Data Protection Act (CDPA)

In March 2021, the Virginia State Governor signed the Consumer Data Protection Act (‘CDPA’) into law.

What is the CDPA about?

The CDPA regulates privacy and data protection matters in Virginia. The law gives consumers the right to access their data and to lodge requests that businesses must delete their personal information. The CDPA requires companies to conduct data protection assessments related to their processing of personal data for targeted advertising and sales purposes.

Other privacy-related laws

The state of Virigina takes privacy seriously. Virginia also regulates privacy in the state through other laws like the  Personal Information Privacy Act, which restricts the sale of personal information of customers by merchants as well as the use of social security numbers. They also have laws like  the Virginia Telephone Privacy Protection Act in place to protect consumers from receiving marketing-related calls.

The CDPA commencement date

The CDPA will come into effect on 1 January 2023.

Finding out more

You can read the full text of the CDPA on the Virginia General Assembly’s website.