In March, Virginia became the second state to enact a broadly applicable consumer privacy law that gives consumers broad rights related to their personal data that businesses both inside and outside the state collect. Although the Virginia Consumer Data Protection Act (VCDPA) has some similarities to the California Consumer Protection Act (CCPA) and the European Union's General Data Protection Regulation (GDPR), it also introduces different definitions and requirements that businesses need to plan for. In this video, Data Privacy, Cybersecurity & Data Strategy members Jami Mills Vibbert and Nancy Perkins give a high-level explanation of the VCDPA and how businesses should start preparing for compliance with this (and additional) US privacy laws.

Originally Published by Arnold & Porter Kaye Scholer, March 2021

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.