On March 2, 2021, Virginia Governor Ralph Northam signed the Virginia Consumer Data Protection Act (CDPA) into law, which will take effect on January 1, 2023.
The CDPA includes several consumer privacy rights, including: the right to receive notice of processing activities; the right to access personal data; the right to correct and delete personal data; the right to opt out of behavioral advertising; among others. The CDPA makes Virginia the second state, after California, to have comprehensive data privacy legislation.