Virginia Gov. Ralph Northam (D) on Tuesday signed the Consumer Data Protection Act, making Virginia the second state in the US to pass a comprehensive data privacy law.
The bill gives consumers the right to ensure that their personal data is not processed for targeted advertising and the right to confirm whether their data is being processed.
State Senator David Marsden (D), who introduced the bill, welcomed Northam’s signing.
“This is a huge step forward. By creating this omnibus law, we are at the forefront of data privacy in the United States. This omnibus law is clear, concise and holds companies accountable for protecting consumer data by providing protection to consumers, ”Marsden said in a statement.
A Northam spokesperson did not immediately respond to comment.
The law will enter into force in 2023 and will apply to all businesses that manage or process the quote data of at least 100,000 consumers, generate more than 50 percent gross revenue from the sale of personal data, or process the personal data of at least 25,000 consumers.
Virginia’s bill follows in the footsteps of a privacy law passed by California in 2018. California expanded its law with a voting measure in November.
However, unlike the California bill, Virginia lacks a private right of action, meaning individuals are limited in their ability to sue and enforcement is largely left to the attorney general.
Other states are also considering data privacy proposals.
In Washington, lawmakers started a debate over a privacy law similar to Virginia’s. New York Gov. Andrew Cuomo
Andrew Cuomo Majority of New York voters say Cuomo should not be reelected: Gillibrand poll: Cuomo allegations ‘completely unacceptable’ NY lawmakers agree to strip Cuomo of pandemic-related emergency powers MORE (D) has also backed similar legislation, and Oklahoma and Utah also weigh their own countries.