In The News

Virginia Passes Nation’s Second Comprehensive Privacy Law

Compliance Week

03 Mar 2021

Kristen Mathews spoke to Compliance Week about the Virginia Consumer Data Protection Act, which Governor Ralph Northam signed on March 2 to take effect beginning January 1, 2023.

According to Kristen, the Virginia law mirrors the California Privacy Rights Act in many ways, but adds in several new requirements. For one, businesses have to create an appeals process if they deny a consumer’s request for information about their personal data, and if the business denies the appeal, they must refer the consumer to the Attorney General’s office complaint line – something businesses would be loath to do.

“Businesses might honor requests (for information) even if the law doesn’t require them to,” Kristen said.

She added that the Virginia data privacy law also requires businesses to conduct data protection assessments, where they list out steps taken to keep customers’ personal information safe.

Read the full article (subscription may be required).



Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our Privacy Policy, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.