Virginia is poised to be the second state, after California, to pass comprehensive data privacy legislation. The Virginia Consumer Data Protection Act passed the Senate and the House of Delegates on Feb. 24, 2021, and now awaits the approval of Governor Northam.

Although the Virginia statute will not take effect until Jan. 1, 2023, companies that have come into compliance with the CCPA are already assessing the impact that the Virginia legislation will have on their privacy programs. As the following chart indicates, while there is overlap between the Virginia statute and the CCPA, the Virginia statute will be, by and large, broader in scope than its California predecessor: