Virginia may become the second state to enact major privacy legislation of general applicability, following the California Consumer Privacy Act (“CCPA”), which was enacted in 2018. The Virginia bill, if signed into law, would take effect January 1, 2023. The legislation would: establish a comprehensive framework for controlling and processing personal data of Virginia residents provide Virginia residents with certain rights with respect to their personal data, including rights of access, correction, deletion, portability, the right to opt out of certain processing, and the right to appeal a controller’s decision regarding a rights request. include requirements with respect to data minimization, processing limitations, data security, non-discrimination, third-party contracting…