ANALYSIS: Virginia, Not California, Is Privacy’s Next Top Model

The future of consumer privacy now has a sleek East Coast vibe with Virginia’s enactment of the Consumer Data Protection Act (VCDPA). A mere eight pages long, Virginia’s take on consumer privacy contrasts sharply with the extensive, highly detailed obligations draping the California Consumer Privacy Act (CCPA). And with additional requirements woven into the lengthier California Privacy Rights Act (CPRA), Virginia’s slim cut is undoubtedly a better fit for business.

Entering into effect Jan. 1, 2023, the VCDPA introduces a tailored approach to comprehensive (i.e., non-sectoral) privacy legislation. Far from being a CCPA imitation, the Virginia law is a no-nonsense ...