On March 2, 2021, Virginia enacted the Virginia Consumer Data Protection Act (the “VCDPA”), which will go into effect on January 1, 2023. The VCDPA imposes a number of obligations on businesses that control or process personal data and grants consumers a range of new rights over their personal data. Consumer rights under the VCDPA include the right to: (1) receive notice of processing activity; (2) access personal data; (3) obtain a copy of the consumer’s data in a portable and readily usable format; (4) correct errors in personal data; (5) delete personal data; (6) opt out of behavioral advertising, automated profiling, and sales of personal information; and (7) avoid discrimination as a result of exercising consumer rights under the VCDPA. Importantly, the VCDPA does not create a private right of action for consumers.