As expected, Virginia became the second U.S. state to enact a sweeping data privacy law. The Virginia Consumer Data Protection Act (VCDPA) borrows heavily from California’s data privacy laws (CCPA