Virginia is poised to be the second state, after California, to pass comprehensive data privacy legislation. The Virginia Consumer Data Protection Act passed the Senate and the House of Delegates on Feb. 24, 2021, and now awaits the approval of Governor Northam.
Although the Virginia statute will not take effect until Jan. 1, 2023, companies that have come into compliance with the European GDPR are already assessing the impact that the Virginia legislation will have on their privacy programs. As the following chart indicates there is significant conceptual overlap between the Virginia statute and the GDPR:
