by Hinshaw Law
A comprehensive data protection and privacy bill, titled the Consumer Data Protection Act, has been introduced in the Virginia state senate. With notable exceptions the proposal contains privacy and cybersecurity provisions similar to those contained in the California Consumer Privacy Act, the California Privacy Rights Act, and the E.U.’s General Data Protection Regulation.
The bill would create a number of personal data rights for consumers. Under the bill, “consumer” is defined as “a natural person who is a resident of the Commonwealth acting only in an individual or household context,” excluding persons “acting in a commercial or employment context.” Personal data means “any information that is linked or reasonably linkable to an identified or identifiable person.”