The new year marks a new chapter in U.S. comprehensive state privacy law. The California Privacy Rights Act and the Virginia Consumer Data Protection Act took force Jan. 1. The CPRA amends the existing California Consumer Privacy Act and hands enforcement powers to the California Privacy Protection Agency. Final CPRA regulations are pending final approval ahead of July 1 enforcement. Virginia's law incorporates concepts from the CPRA, while other provisions carry their own nuances. The Virginia General Assembly used the 2022 legislative session to pass amendments to the law before it took effect. The IAPP constructed a table (attached) to compare privacy laws in California, Colorado and Virginia.
Comparison of Comprehensive Data Privacy Laws in Virginia, California and Colorado (PDF)