ANALYSIS: Beware of Subtleties in Virginia vs. Colorado Privacy

The newest state consumer privacy laws have much in common—both with each other and with the laws from which they took their inspiration—but subtle differences may trip up even the most seasoned compliance professionals.

The Old Dominion approved Virginia’s Consumer Data Protection Act (VCDPA) this past spring, and the Centennial State followed suit just last month with the passage of the Colorado Privacy Act (CPA).

Both laws were greeted with groans from many in the compliance community, inasmuch as their enactments took place not long after the approval of California’s ballot initiative—the California Privacy Rights Act (CPRA)—which substantially revises the ...