Senate Bill ('SB') 393 to amend the Consumer Data Protection Act ('CDPA') with respect to the right to deletion passed, on 14 February 2022, the State Senate and will now be considered in the House of Delegates. The bill would provide that a 'controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data […] by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling […]'.

You can read the bill and track its progress here.