In March 2021, Virginia’s Governor Ralph Northam signed the Consumer Data Protection Act (CDPA), making Virginia the second state to enact comprehensive data privacy protections for its residents. If you are feeling blindsided by this news, you are not alone.[1] Unlike California’s Consumer Privacy Act (CCPA) and Privacy Rights Act (CPRA) or the European