On March 2, 2021, Virginia enacted its Consumer Data Protection Act. This Act is a combination of the EU GDPR and the California Consumer Privacy Act (CCPA), and it will go into effect on January 1, 2023 -- the same day as the California Privacy Rights Act (CPRA).
The Act applies to anyone that conducts business in the state or that targets Virginia residents. Similar to the CCPA, it applies to businesses that process the personal data of more than 100,000 Virginia consumers annually, make 50% of more of their gross revenue from the sale of personal data, and/or process the personal data of more then 25,000 Virginia residents annually.
[revised on April 5] A key difference between the CCPA and the Va CDPA is that there is no private right of action under the Va CDPA (see link).
Image from wikimedia.org.