Morgan Lewis partners Greg Parks and Kristin Hadgis and associates Drew Jordan and Taylor Day authored an article for Law360 about the Virginia Consumer Data Protection Act, a comprehensive privacy law expected to be signed into law soon. Once signed, the requirements would be enacted on January 1, 2023, and make Virginia only the second state in the United States, after California, to enact such a broad privacy act.
The article provides key takeaways for businesses to help them prepare for the law. “Businesses that have been building compliance programs for the CCPA (California Consumer Privacy Act) and CPRA (California Privacy Rights Act) will be well positioned to comply with the Virginia CDPA, should it be signed into law. Some key differences in the VCDPA, however, will require businesses to review their compliance programs to ensure compliance with the nation's second comprehensive privacy state law,” the authors wrote in the piece.
Read the full Law360 article >>