Virginia Consumer Data Protection Act (CDPA)
CDPA requires that businesses only hold the pieces of data they need for a specific purpose and necessary to achieve that purpose; these principles are commonly referred to
California Federal Court to Decide Whether the Absence of a Public Facing Retention Policy Constitute a Single Violation of BIPA or Whether Multiple Violations Are Possible.
Unique among state laws, the Illinois Biometric Information Privacy Act (“BIPA”) creates a private right of action for "any person aggrieved" by a violation of the statute and provides for statutory damages of $1,000 for a negligent violation to $5,000