Virginia Gov. Ralph Northam signed a comprehensive privacy law that gives consumers the right to access their personal data held by companies and allows them to request that it be deleted.

The Virginia law, which goes into effect in January 2023, also requires covered companies to conduct data protection assessments on personal information used for targeted advertising and sales purposes. Its passage gives companies doing business in the United States a second comprehensive state privacy bill to comply with after California passed a privacy law in 2018.