Virginia Governor Glenn Youngkin has signed three amendment bills to the Virginia Consumer Data Protection Act (VCDPA), officially concluding the amendment process and solidifying the text of the law before its effective date on January 1, 2023. The approved bills introduce changes related to the right to delete, expand the definition of excluded nonprofits to include political organizations, and repeal the VCDPA consumer privacy fund, redirecting payments to an existing state fund. Although a fourth VCDPA amendment bill identical to one of the signed bills was vetoed by Youngkin.

Virginia amendment process complete, text finalized, ahead of Jan. 1 effective date

The IAPP has developed a comprehensive chart that compares the data privacy laws in California, Virginia, and Colorado. This chart offers a detailed overview of the requirements outlined in each law, emphasizing the similarities and differences between them. It aims to assist businesses in understanding the upcoming operational dates, such as the January 2023 implementation of Virginia's Consumer Data Protection Act and the majority of provisions in the California Privacy Rights Act, as well as the July 2023 effective date for the Colorado Privacy Act.

Comparison of Comprehensive Data Privacy Laws in Virginia and California

Virginia governor signs VCDPA amendment bills

‍

The Virginia Consumer Data Protection Act, signed into law on March 2 by Gov. Ralph Northam, is set to become effective on January 1, 2023. Recognizing the possibility of amendments before implementation, the law includes a provision mandating the establishment of a work group to review its specific provisions and address implementation-related issues for consideration by the Virginia legislature. The meetings and final report of the work group, submitted on November 1, shed light on potential amendments that may be made prior to the law's effective date.

Recap of Virginia Consumer Data Protection Work Group

With the signing of the Virginia Consumer Data Protection Act by Gov. Ralph Northam on March 2, 2021, Virginia joined the ranks as the second state to implement a comprehensive privacy law encompassing various consumer rights. This new legislation went into effect on January 1, 2023, coinciding with the implementation date of the California Privacy Rights Act, which introduces amendments to the California Consumer Privacy Act.

Virginia's CDPA can be seen as a streamlined version of the Washington Privacy Act, which was introduced with much anticipation two years ago but is still uncertain in terms of its passage. In contrast, the CDPA swiftly moved through the Virginia Legislature, receiving overwhelming support and being approved in less than two months.

What Virginia’s Consumer Data Protection Act means for your privacy program