Bill
Bill > SB1392
summary
Introduced
01/13/2021
01/13/2021
In Committee
02/15/2021
02/15/2021
Crossed Over
02/18/2021
02/18/2021
Passed
02/24/2021
02/24/2021
Dead
Signed/Enacted/Adopted
03/02/2021
03/02/2021
Introduced Session
2021 Special I
Bill Summary
Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023. Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023.
AI Summary
This bill establishes the Consumer Data Protection Act, which creates a framework for controlling and processing personal data in the Commonwealth of Virginia. The bill applies to businesses in Virginia that control or process personal data of at least 100,000 consumers or derive over 50% of their revenue from the sale of personal data and control or process data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors, grants consumers rights to access, correct, delete, and obtain their personal data, and allows consumers to opt out of targeted advertising, data sales, and profiling. The Attorney General has exclusive authority to enforce the law, and a Consumer Privacy Fund is created to support these enforcement efforts. The bill has a delayed effective date of January 1, 2023.
Committee Categories
Budget and Finance, Business and Industry, Justice
Sponsors (3)
Last Action
Governor: Acts of Assembly Chapter text (CHAP0036) (on 03/02/2021)
Official Document
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
Loading...