republic-os/legislation/us/states/va/2021/sb-1392.md

---
type: "Bill"
title: "Consumer Data Protection Act; personal data rights of consumer, etc."
description: "Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023."
jurisdiction: "us/states/va"
legislature: "Virginia General Assembly"
session: "2021"
identifier: "SB 1392"
citation: "Virginia SB 1392 (2021)"
classification: ["bill"]
subjects: []
status: "enacted"
primary_sponsors: ["David W. Marsden"]
version_count: 6
action_count: 45
vote_count: 10
first_action: "2021-01-13"
last_action: "2021-03-02"
source: "openstates"
source_identifier: "ocd-bill/6e4bfce7-49cd-4861-8249-253004b38e3c"
source_url: "https://lis.virginia.gov/cgi-bin/legp604.exe?212+sum+SB1392"
source_hash: "33e3c6c8b95ba0aa36e555cb14fff398f45a11bc9c06c7646aaca9eaa88e08b8"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-va"]
---

# Virginia SB 1392 (2021) — Consumer Data Protection Act; personal data rights of consumer, etc.

Consumer Data Protection Act. Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law. The bill grants consumer rights to access, correct, delete, obtain a copy of personal data, and to opt out of the processing of personal data for the purposes of targeted advertising. The bill provides that the Attorney General has exclusive authority to enforce violations of the law, and the Consumer Privacy Fund is created to support this effort. The bill has a delayed effective date of January 1, 2023.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **CHAP0036** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+CHAP0036)
2. **Committee substitute printed 21103367D-S1** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+SB1392S1)
3. **Committee substitute printed 21200213D-H1** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+SB1392H1)
4. **Prefiled and ordered printed; offered 01/13/21 21102919D** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+SB1392)
5. **SB1392ER** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+SB1392ER)
6. **SB1392ES1** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?212+ful+SB1392ES1)

## Votes

- Read third time and passed Senate (36-Y 0-N 1-A) — **36–0** (pass) · upper
- Reported from Communications, Technology and Innovation with substitute (18-Y 3-N) — **18–3** (pass) · lower
- House substitute agreed to by Senate (36-Y 2-N) — **36–2** (pass) · upper
- Constitutional reading dispensed (39-Y 0-N) — **39–0** (pass) · upper
- Reconsideration of House substitute agreed to by Senate (39-Y 0-N) — **39–0** (pass) · upper
- Reported from General Laws and Technology with substitute (13-Y 0-N 1-A) — **13–0** (pass) · upper
- VOTE: Passage (89-Y 9-N) — **88–9** (pass) · lower
- Reported from Finance and Appropriations with amendments (16-Y 0-N) — **16–0** (pass) · upper
- House substitute agreed to by Senate (32-Y 7-N) — **32–7** (pass) · upper
- Continued to Special Session 1 in Communications, Technology and Innovation — **0–0** (fail) · lower

## Sponsors

- David W. Marsden — primary (person)
- C.E. Cliff Hayes, Jr. — cosponsor (person)
- Jennifer B. Boysko — cosponsor (person)
- Siobhan S. Dunnavant — cosponsor (person)
- Suhas Subramanyam — cosponsor (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2021-01-13** Prefiled and ordered printed; offered 01/13/21 21102919D `introduction`
- **2021-01-13** Referred to Committee on General Laws and Technology `referral-committee`
- **2021-01-22** Impact statement from DPB (SB1392)
- **2021-01-27** Senate committee, floor amendments and substitutes offered
- **2021-01-27** Committee substitute printed 21103367D-S1 `substitution`
- **2021-01-27** Reported from General Laws and Technology with substitute (13-Y 0-N 1-A) `committee-passage`
- **2021-01-27** Rereferred to Finance and Appropriations `referral-committee`
- **2021-02-01** Impact statement from DPB (SB1392S1)
- **2021-02-03** Senate committee, floor amendments and substitutes offered
- **2021-02-03** Reported from Finance and Appropriations with amendments (16-Y 0-N) `committee-passage`
- **2021-02-03** Constitutional reading dispensed (39-Y 0-N)
- **2021-02-04** Read second time `reading-2`
- **2021-02-04** Reading of substitute waived
- **2021-02-04** Committee substitute agreed to 21103367D-S1
- **2021-02-04** Reading of amendments waived
- **2021-02-04** Committee amendments agreed to
- **2021-02-04** Engrossed by Senate - committee substitute with amendments SB1392ES1
- **2021-02-04** Printed as engrossed 21103367D-ES1
- **2021-02-05** Impact statement from DPB (SB1392ES1)
- **2021-02-05** Read third time and passed Senate (36-Y 0-N 1-A) `passage, reading-3`
- **2021-02-07** Placed on Calendar
- **2021-02-07** Read first time `reading-1`
- **2021-02-07** Referred to Committee on Communications, Technology and Innovation `referral-committee`
- **2021-02-08** Continued to Special Session 1 in Communications, Technology and Innovation
- **2021-02-15** House committee, floor amendments and substitutes offered
- **2021-02-15** Reported from Communications, Technology and Innovation with substitute (18-Y 3-N) `committee-passage`
- **2021-02-15** Committee substitute printed 21200213D-H1 `substitution`
- **2021-02-17** Impact statement from DPB (SB1392H1)
- **2021-02-17** Read second time `reading-2`
- **2021-02-18** Read third time `reading-3`
- **2021-02-18** Committee substitute agreed to 21200213D-H1
- **2021-02-18** Engrossed by House - committee substitute SB1392H1
- **2021-02-18** Passed House with substitute (89-Y 9-N) `passage`
- **2021-02-18** VOTE: Passage (89-Y 9-N)
- **2021-02-19** House substitute agreed to by Senate (36-Y 2-N)
- **2021-02-19** Reconsideration of House substitute agreed to by Senate (39-Y 0-N)
- **2021-02-19** House substitute agreed to by Senate (32-Y 7-N)
- **2021-02-19** Title replaced 21200213D-H1
- **2021-02-24** Enrolled
- **2021-02-24** Impact statement from DPB (SB1392ER)
- **2021-02-24** Signed by President
- **2021-02-25** Signed by Speaker
- **2021-02-26** Enrolled Bill Communicated to Governor on February 26, 2021
- **2021-02-26** Governor's Action Deadline 11:59 p.m., March 31, 2021
- **2021-03-02** Approved by Governor-Chapter 36 (effective - 1/1/23) `executive-signature`

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/6e4bfce7-49cd-4861-8249-253004b38e3c`. Confidence: reported (aggregated from official Virginia legislature records).