Virginia Consumer Data Protection Act
In effect since January 1, 2023, for businesses that handle data on 100,000 or more Virginia consumers, or on 25,000 or more while earning over half their gross revenue from selling it. Most small businesses fall below both thresholds. Your attorney confirms whether it applies to you.