Virginia has followed in California's footsteps and passed its own data and consumer privacy law, making it the second state (or, commonwealth) to pass a proactive data privacy law governing the collection and use of consumers' personal information. The Virginia Consumer Data Protection Act (CDPA) was signed into law in March. While there is time to prepare before the CDPA goes into effect Jan. 1, 2023, the law brings privacy regulations closer to home for businesses on the East Coast and in the mid-Atlantic that may have ignored the potential applicability of the California Consumer Privacy Act.