The act, HB 2307 Consumer Data Protection Act; personal data rights of consumer, etc; cleared the state assembly last month. This gives consumes rights to receive copies of, and amend, their digital data. It also gives an opt out of businesses using and selling such data for marketing or other purposes. All being well, the Act comes into force in January 2023. It has limits though in applying only to those with more than 100,000 customers in the state of Virginia, or make more than 50% of their income from selling personal data. After California taking the brave step forward, and the mess of Safe Harbor, this is at very least a small sign that some local Governments take personal information seriously.