Compare with different regulatory event:

Description

Implemented Amendment to the Consumer Data Protection Act

On 1 January 2023, the Amendment to the Consumer Data Protection Act enters into force after being signed into law by Virginia Governor, Ralph Northam on 2 March 2022. The Act amends the provisions regarding the right to data deletion to enable individuals to have control over their data. In particular, the data controllers will be obliged to delete the data that wasn’t obtained directly from the consumer after they receive a deletion request. Previously, the Act wasn’t requiring the deletion of all data collected on a specific user and the data controllers were able to process the data collected through third parties on a user for sale or targeted advertising.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2022-01-11
under deliberation

On 11 January 2022, the Amendment to the Consumer Data Protection Act was introduced in the Virgini…

2022-02-25
adopted

On 25 February 2022, House Bill 381 amending the Consumer Data Protection Act was adopted by both t…

2022-03-02
adopted

On 2 March 2022, the Amendment to the Consumer Data Protection Act was signed into law by Virginia …

2023-01-01
in force

On 1 January 2023, the Amendment to the Consumer Data Protection Act enters into force after being …

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data collection
Regulatory tool
User right to deletion of personal data
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data collection