Virginia Follows California Lead on Data Protection—With Narrower Scope

By: Faith D. Kasparian & Ann M. O’Rourke

On March 2, 2021, a new comprehensive data protection law was enacted in Virginia, which will become effective on January 1, 2023.  The scope of the Virginia Consumer Data Protection Act (VCDPA) is narrower in many respects than the California Consumer Privacy Act (CCPA).  Notably, unlike the CCPA, there is no threshold that would place a business within scope of the law based solely on the amount of its annual revenues. 

Despite its narrower scope, the VCDPA affords consumers many of the same rights as the CCPA regarding their personal data and places numerous obligations on businesses handling this data if they are within the scope of the law.  

Continue reading in our Client Alert.