The Emergence of Data Protection Assessments (DPAs) in State Privacy Legislation
2021 has witnessed extensive legislative activity in the field of consumer data privacy. The California Consumer Privacy Act (CCPA), which was enacted in 2018, was the first comprehensive state information privacy framework. The second, the Virginia Consumer Data Protection Act (CDPA), was signed into law on March 2, 2021.