On January 1, 2023, Virginia’s Consumer Data Protection Act (“Virginia Privacy Law”) went into effect, the second in the US aimed to protect consumers’ personal data. We previously blogged about its passage. Here’s what you should know.
Who’s Covered.
The Virginia Privacy Law applies to businesses (called “controllers”) that conduct business in Virginia. It can apply to businesses that are not headquartered, incorporated or located in Virginia if they offer products or services targeted to Virginia residents and that (1) control or process personal data of at least 100,000 Virginia residents in a calendar year or (2) control or process the personal data of at least 25,000 Virginia residents and derive more than half their gross revenue from the sale of personal data.
