republic-os/legislation/us/states/va/2021/sb-1392.md

type, title, description, jurisdiction, legislature, session, identifier, citation, classification, subjects, status, primary_sponsors, version_count, action_count, vote_count, first_action, last_action, source, source_identifier, source_url, source_hash, vintage, source_snapshot, retrieved_at, confidence, tags

type	title	description	jurisdiction	legislature	session	identifier	citation	classification	subjects	status	primary_sponsors	version_count	action_count	vote_count	first_action	last_action	source	source_identifier	source_url	source_hash	vintage	source_snapshot	retrieved_at	confidence	tags
Bill	Consumer Data Protection Act; personal data rights of consumer, etc.	Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023.	us/states/va	Virginia General Assembly	2021	SB 1392	Virginia SB 1392 (2021)	bill		enacted	David W. Marsden	6	45	10	2021-01-13	2021-03-02	openstates	ocd-bill/6e4bfce7-49cd-4861-8249-253004b38e3c	https://lis.virginia.gov/cgi-bin/legp604.exe?212+sum+SB1392	33e3c6c8b95ba0aa36e555cb14fff398f45a11bc9c06c7646aaca9eaa88e08b8	2026-07-01	https://data.openstates.org/daily/2026-07-01/public.pgdump	2026-07-06	reported	legislation bill us-va

Virginia SB 1392 (2021) — Consumer Data Protection Act; personal data rights of consumer, etc.

Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023.

Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. CHAP0036 (committee substitute) — source
2. Committee substitute printed 21103367D-S1 (committee substitute) — source
3. Committee substitute printed 21200213D-H1 (committee substitute) — source
4. Prefiled and ordered printed; offered 01/13/21 21102919D (committee substitute) — source
5. SB1392ER (committee substitute) — source
6. SB1392ES1 (committee substitute) — source

Votes

• Read third time and passed Senate (36-Y 0-N 1-A) — 36–0 (pass) · upper
• Reported from Communications, Technology and Innovation with substitute (18-Y 3-N) — 18–3 (pass) · lower
• House substitute agreed to by Senate (36-Y 2-N) — 36–2 (pass) · upper
• Constitutional reading dispensed (39-Y 0-N) — 39–0 (pass) · upper
• Reconsideration of House substitute agreed to by Senate (39-Y 0-N) — 39–0 (pass) · upper
• Reported from General Laws and Technology with substitute (13-Y 0-N 1-A) — 13–0 (pass) · upper
• VOTE: Passage (89-Y 9-N) — 88–9 (pass) · lower
• Reported from Finance and Appropriations with amendments (16-Y 0-N) — 16–0 (pass) · upper
• House substitute agreed to by Senate (32-Y 7-N) — 32–7 (pass) · upper
• Continued to Special Session 1 in Communications, Technology and Innovation — 0–0 (fail) · lower

Sponsors

• David W. Marsden — primary (person)
• C.E. Cliff Hayes, Jr. — cosponsor (person)
• Jennifer B. Boysko — cosponsor (person)
• Siobhan S. Dunnavant — cosponsor (person)
• Suhas Subramanyam — cosponsor (person)

Timeline

The legislative action history — every referral, reading, and vote.

• 2021-01-13 Prefiled and ordered printed; offered 01/13/21 21102919D introduction
• 2021-01-13 Referred to Committee on General Laws and Technology referral-committee
• 2021-01-22 Impact statement from DPB (SB1392)
• 2021-01-27 Senate committee, floor amendments and substitutes offered
• 2021-01-27 Committee substitute printed 21103367D-S1 substitution
• 2021-01-27 Reported from General Laws and Technology with substitute (13-Y 0-N 1-A) committee-passage
• 2021-01-27 Rereferred to Finance and Appropriations referral-committee
• 2021-02-01 Impact statement from DPB (SB1392S1)
• 2021-02-03 Senate committee, floor amendments and substitutes offered
• 2021-02-03 Reported from Finance and Appropriations with amendments (16-Y 0-N) committee-passage
• 2021-02-03 Constitutional reading dispensed (39-Y 0-N)
• 2021-02-04 Read second time reading-2
• 2021-02-04 Reading of substitute waived
• 2021-02-04 Committee substitute agreed to 21103367D-S1
• 2021-02-04 Reading of amendments waived
• 2021-02-04 Committee amendments agreed to
• 2021-02-04 Engrossed by Senate - committee substitute with amendments SB1392ES1
• 2021-02-04 Printed as engrossed 21103367D-ES1
• 2021-02-05 Impact statement from DPB (SB1392ES1)
• 2021-02-05 Read third time and passed Senate (36-Y 0-N 1-A) passage, reading-3
• 2021-02-07 Placed on Calendar
• 2021-02-07 Read first time reading-1
• 2021-02-07 Referred to Committee on Communications, Technology and Innovation referral-committee
• 2021-02-08 Continued to Special Session 1 in Communications, Technology and Innovation
• 2021-02-15 House committee, floor amendments and substitutes offered
• 2021-02-15 Reported from Communications, Technology and Innovation with substitute (18-Y 3-N) committee-passage
• 2021-02-15 Committee substitute printed 21200213D-H1 substitution
• 2021-02-17 Impact statement from DPB (SB1392H1)
• 2021-02-17 Read second time reading-2
• 2021-02-18 Read third time reading-3
• 2021-02-18 Committee substitute agreed to 21200213D-H1
• 2021-02-18 Engrossed by House - committee substitute SB1392H1
• 2021-02-18 Passed House with substitute (89-Y 9-N) passage
• 2021-02-18 VOTE: Passage (89-Y 9-N)
• 2021-02-19 House substitute agreed to by Senate (36-Y 2-N)
• 2021-02-19 Reconsideration of House substitute agreed to by Senate (39-Y 0-N)
• 2021-02-19 House substitute agreed to by Senate (32-Y 7-N)
• 2021-02-19 Title replaced 21200213D-H1
• 2021-02-24 Enrolled
• 2021-02-24 Impact statement from DPB (SB1392ER)
• 2021-02-24 Signed by President
• 2021-02-25 Signed by Speaker
• 2021-02-26 Enrolled Bill Communicated to Governor on February 26, 2021
• 2021-02-26 Governor's Action Deadline 11:59 p.m., March 31, 2021
• 2021-03-02 Approved by Governor-Chapter 36 (effective - 1/1/23) executive-signature

Source

OpenStates / OpenCivicData bulk snapshot 2026-07-01; origin ocd-bill/6e4bfce7-49cd-4861-8249-253004b38e3c. Confidence: reported (aggregated from official Virginia legislature records).