Nixon Peabody LLP

  • People
  • Capabilities
  • Insights
  • About

Trending Topics

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni

    Practices

    View All

    • Affordable Housing
    • Community Development Finance
    • Corporate & Finance
    • Cybersecurity & Privacy
    • Environmental
    • Franchising & Distribution
    • Government Investigations & White Collar Defense
    • Healthcare
    • Intellectual Property
    • International Services
    • Labor & Employment
    • Litigation
    • Private Wealth & Advisory
    • Project Finance
    • Public Finance
    • Real Estate
    • Regulatory & Government Relations

    Industries

    View All

    • Cannabis
    • Consumer
    • Energy
    • Entertainment
    • Financial Services
    • Healthcare
    • Higher Education
    • Infrastructure
    • Manufacturing
    • Non Profit
    • Real Estate
    • Technology

    Value-Added Services

    View All

    • Alternative Fee Arrangements

      Developing innovative pricing structures and alternative fee agreement models that deliver additional value for our clients.

    • Continuing Education

      Advancing professional knowledge and offering credits for attorneys, staff and other professionals.

    • Crisis Advisory

      Helping clients respond correctly when a crisis occurs.

    • DEI Strategic Services

      Providing our clients with legal, strategic, and practical advice to make transformational changes in their organizations.

    • eDiscovery

      Leveraging law and technology to deliver sound solutions.

    • Global Services

      Delivering seamless service through partnerships across the globe.

    • Innovation

      Leveraging leading-edge technology to guide change and create seamless, collaborative experiences for clients and attorneys.

    • IPED

      Industry-leading conferences focused on affordable housing, tax credits, and more.

    • Legal Project Management

      Providing actionable information to support strategic decision-making.

    • Legally Green

      Teaming with clients to advance sustainable projects, mitigate the effects of climate change, and protect our planet.

    • Nixon Peabody Trust Company

      Offering a range of investment management and fiduciary services.

    • NP Capital Connector

      Bringing together companies and investors for tomorrow’s new deals.

    • NP Second Opinion

      Offering fresh insights on cases that are delayed, over budget, or off-target from the desired resolution.

    • NP Trial

      Courtroom-ready lawyers who can resolve disputes early on clients’ terms or prevail at trial before a judge or jury.

    • Social Impact

      Creating positive impact in our communities through increasing equity, access, and opportunity.

    1. Home
    2. Insights
    3. Articles
    4. Virginia becomes second state to pass comprehensive data privacy lawArticles

    Article

    Virginia becomes second state to pass comprehensive data privacy law

    March 12, 2021

    Share
    Virginia became the second state in the nation to enact a privacy protection law, the Virginia Consumer Data Protection Act (VCDPA) that goes into effect in 2023.

    On March 2, 2021, Virginia became the second state in the nation to enact a privacy protection law. The new law is called the Virginia Consumer Data Protection Act (VCDPA), and it goes into effect on January 1, 2023. Given the almost two-year lag between the enactment and effective dates, covered businesses will have sufficient time to plan ahead and take steps to comply with the law. 

    The VCDPA applies to organizations conducting business in Virginia, or that produce products or services that target Virginia residents. In addition, to be covered, an organization must also control or process personal data of at least 100,000 consumers in a calendar year, or control and process personal data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data. Some entities are not covered by the new law, including governmental entities, higher education institutions, and nonprofits. Certain types of data are excluded from coverage under the VCDPA including employee data, information governed by federal regulations such as Fair Credit Reporting Act and the Children’s Online Privacy Protection Act. Financial institutions and data subject to the Gramm-Leach-Bliley Act are also excluded from the requirements of the VCDPA. And, entities and data governed by the Health Insurance Portability and Accountability Act are not covered.

    The Act gives consumers the right to, among other things, opt out of the processing of personal data for the purpose of targeted advertising, the sale of their personal data, and profiling. However, the VCDPA does not give individuals the right to enforce the statute—in other words, there is no private right of action, and only the state attorney general has enforcement authority.

    In light of the passage of the new Virginia law, entities covered under it will not only have to grapple with updating policies and procedures to meet their obligations under the VCDPA, but they must also pay attention to other privacy laws that govern them now or that may govern them in the future to assure that those policies and procedures address any areas where the patchwork of privacy protection laws may diverge.

    PrivacyCybersecurityPrivacy

    Practices

    Cybersecurity & Privacy

    Subscribe to stay informed of the latest legal news, alerts, and business trends.Subscribe

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni
    • © 2023 Nixon Peabody. All rights reserved
    • Privacy Policy
    • Terms of Use
    • Statement of Client Rights
    • Supplier Diversity Program
    • Nixon Peabody International LLC
    • PAL