In The News

Five Subtle Ambiguities in Virginia’s New Privacy Law

Bloomberg Law

09 Jun 2021

Kristen Mathews was featured in a Bloomberg Law article covering her Privacy + Security Forum’s Virtual Spring Academy presentation on the areas in Virginia’s Consumer Data Protection Act (VCDPA) that could use some clarification before going into effect on January 1, 2023.

According to Kristen, one issue that needs to be addressed is related to access and data portability. The VCDPA grants consumers a right to obtain a copy of their personal data, and it specifically indicates that the copy be provided “in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance,” but this provision also includes a modifier: “where the processing is carried out by automated means.” Kristen questions whether “automated means” modifies the requirement to make the personal data portable or the overarching consumer right to access personal data.

Read the full article.



Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our Privacy Policy, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.