Virginia Consumer Data Protection Act (CDPA)

In March 2021, the Virginia State Governor signed the Consumer Data Protection Act (‘CDPA’) into law. The CPDA came into effect on 1 January 2023.

What is the CDPA about?

The CDPA regulates privacy and data protection matters in Virginia. The law gives consumers the right to access their data and to lodge requests that businesses must delete their personal information. The CDPA requires companies to conduct data protection assessments related to their processing of personal data for targeted advertising and sales purposes.

Other privacy-related laws

The state of Virigina takes privacy seriously. Virginia also regulates privacy in the state through other laws like the  Personal Information Privacy Act, which restricts the sale of personal information of customers by merchants as well as the use of social security numbers. They also have laws like the Virginia Telephone Privacy Protection Act in place to protect consumers from receiving marketing-related calls.

Finding out more

You can read the full text of the CDPA on the Virginia General Assembly’s website.