In January 2021, the Commonwealth of Virginia passed the Virginia Consumer Data Protection Act (VCDPA) which grants rights to Virginia residents over personal information collected about them by others. While the VDCPA does not go into effect until January 1, 2023, the provisions in the statute are similar to other rigorous privacy laws. Organizations must prepare for these regulations ahead of time. Complying with VCDPA reinforces other governance, risk, and compliance (GRC) objectives for your organization related to data management, data privacy, and data protection.