2021 State Bills Virginia 2021 HB 2307

Summary

Establishes a framework for controlling and processing personal data in the Commonwealth. Applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. Outlines responsibilities and privacy protection standards for data controllers and processors. Grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. Sensitive data, a form of personal data, is defined to include the processing of genetic or biometric data. The bill has a delayed effective date of January 1, 2023. Carried over to 2021 Special Session 1. Governor approved 3/2/21.