Virginia Consumer Data Protection Act: Here Comes the Next State Privacy Law of the Land

The Virginia Consumer Data Protection Act (CDPA) applies to entities that conduct business in Virginia or produce products or services that target Virginia residents and meet one of the following thresholds: (i) during a calendar year, control or process personal data of at least 100,000 Virginia consumers (defined below) or (ii) control or process personal data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data.