On Jan. 1, 2023, both the California Privacy Rights Act (CPRA) and Virginia Consumer Data Privacy Act (VCDPA) come into effect, introducing new and updated data privacy and security obligations to covered entities. As these acts will apply to private entities located outside of California and Virginia, respectively, organizations across the country should begin assessing their data use policies and making any updates necessary to avoid regulatory attention and hefty fines. Please note that the summaries below are not intended to be comprehensive.
