Last week, Virginia became the second U.S. state to launch its own consumer data protection legislation, known as the Consumer Data Protection Act (CDPA). While the broad strokes of the law may be very similar to the California Consumer Privacy Act (CCPA) and a host of other state privacy acts under consideration, there are enough minor differences to increase compliance burdens for impacted companies moving forward.