The Virginia Consumer Data Protection Act has broad support in both houses, and may be signed into law by Virginia's governor at the end of the month following the third reading on February 5, 2021.  While the proposed law does not allow for a private right of action by consumers, it does propose funding for Virginia's Attorney General to enforce the law by way of a Consumer Privacy Fund.

As currently drafted, the law will provide for various data subject rights (opt-out, access, rectification/correction, portability, and deletion), and will require data impact assessments done for processing activities after January 1, 2023 (the operative date of its much more robust cousin, the CPRA).