- BLOG -


501 Boylston Street, 10th Floor

Boston, MA 02116




New State Privacy Laws in Virginia and Colorado

Posted by Virginia Fournier on August 2, 2021 at 3:37 PM

Virginia privacy law Colorado privacy lawIn the absence of federal privacy legislation and in response to growing public concern over businesses’ use of personal data here in the U.S., more states are filling the void that exists in the area of consumer privacy protection. Earlier this year, Virginia passed the Virginia Consumer Data Protection Act (CDPA), and more recently, Colorado introduced the Colorado Privacy Act (CPA) on July 7th, 2021. Both of these laws will take effect in 2023.

In addition, privacy legislation is currently under consideration in Washington, New York and Minnesota. For companies who do business throughout the U.S., the onerous compliance obligations presented by this patchwork of privacy laws might best be managed by complying with the most restrictive requirements across the board, rather than trying to implement and manage state-by-state requirements.

Side-by-Side Comparison
This chart summarizes and compares the privacy laws in California, Virginia and Colorado. These summaries are meant to highlight the main requirements of these laws, and are not comprehensive. Companies should work with their lawyers to create a compliance program that best suits their needs.

If your business is impacted by Virginia’s CDPA, Colorado’s CPA, or both, it is important to review your privacy policies and practices and prepare for compliance by 2023. We are happy to help. If you have questions about the CA, VA or CO privacy laws and how they may impact your company, please contact Virginia Fournier at vfournier@outsidegc.com or (408) 891-8607.


A member of our California team, Virginia Fournier is a seasoned technology attorney with over 25 years of legal and business experience in the industry. She regularly handles a wide range of technology-related matters, including negotiating and drafting complex licensing agreements, compliance, data security and privacy, and intellectual property issues.  


Topics: Privacy, California Consumer Protection Act, Virginia Consumer Data Protection Act, CDPA, CPA, Virginia privacy law, Colorado Privacy Act

Subscribe to our Blog

Popular Posts

This publication should not be construed as legal advice or a legal opinion on any specific facts or circumstances nor an offer to represent you. It is not intended to create, and receipt does not constitute, an attorney-client relationship. The contents are intended for general informational purposes only, and you are urged to consult your attorney concerning any particular situation and any specific legal questions you may have. Pursuant to applicable rules of professional conduct, portions of this publication may constitute Attorney Advertising.

Outside GC is an innovative approach to legal services for growing and mature businesses. Companies who engage Outside GC fall into two main categories: (1) those without in-house counsel who need regular, on-going legal support but do not wish to hire a full-time in-house lawyer, and (2) those with in-house counsel who do not wish to add more full-time resources to their existing in-house staff. Contact us to speak to one of our on-demand attorneys.