"The Virginia Consumer Data Protection Act," Virginia Law Foundation webinar

Virginia recently became the second state after California to pass a comprehensive consumer privacy statute, the Consumer Data Protection Act. The CDPA's operative date is January 1, 2023, but don't get too comfortable. Covered businesses must adapt their business practices to its requirements, which include data minimization, implementing security controls, and managing personal data in the context of vendor relationships.

DWT counsel Alex Reynolds presented a comprehensive overview the CDPA's requirements on paper and in practice so that attendees would have the tools to successfully prepare their clients.

Topics covered included:

• An overview of the CDPA's requirements
• Analyzing the CDPA in the context of similar data privacy laws, such as the California Consumer Privacy Act and European General Data Protection Regulation
• A discussion of the value of "data mapping" and why the data map is the foundation of successful compliance with the CDPA and data privacy laws generally
• Illustrating the potential impact of the CDPA by applying it to common business-use cases