The law will only apply to businesses with large amounts of consumer data and will not apply to employee or business-to-business (B2B) data. The CDPA was designed to provide key protections for consumers and clearly define the obligations for businesses to ensure a smooth path toward compliance, without imposing overly burdensome requirements in a complicated statutory structure. Its quick pace toward enactment may foreshadow its role as a blueprint for other states looking to enact comprehensive data privacy reform. The CDPA will go into effect on January 1, 2023. To read the full alert, please click here.
What Businesses Need to Know About the Virginia Consumer Data Protection Act
