Virginia’s Consumer Data Protection Act is Not the Commonwealth’s Only Privacy and Data Protection Law — Nor is it the Nation’s First

Virginia’s new Consumer Data Protection Act will take effect on January 1, 2023, adding new consumer privacy rights, a broader interpretation of “personal information,” a separate “sensitive data” category, and data protection assessment obligations into the mix with the commonwealth’s three major pre-existing privacy and data protection laws as Virginia joins the growing ranks of states with comprehensive consumer data privacy acts.