There are a few hot topics such as hefty fines, Google, Facebook, and new laws such as Virginia Consumer Data Protection Act (VCDPA) that usually take the limelight when it comes to privacy. One privacy concern that has captured the interest of privacy professionals, business owners, and news outlets lately is the new data transfer agreement that would provide a mechanism for personal data to be transferred from the European Union (EU) to the United States (US). While this agreement is still in its infancy stage, it will significantly impact how companies manage privacy and data transfers, and thus it

While the United States does not have a federal privacy law (unless you are in healthcare, financial services, or are targeting children under the age of 13), more and more states are passing their own privacy laws to protect their residents. One such state is Virginia, which passed the Virginia Consumer Data Protection Act (VCDPA) in 2021. While this law goes into effect on January 1st, 2023, companies that need to comply should begin their preparations now as the requirements of this new law are extensive, and the penalties for failure to comply are steep. In this article, we will