Gov. Ralph Northam recently signed the Virginia Consumer Data Protection Act, which will give consumers certain rights to control how their personal

data are used beginning Jan. 1, 2023. The legislation has a carve out, however, for information collected in the employment context.