Part II of Arent Fox’s CCPA Progeny series will focus on compliance obligations related to personal information collected from or about customers – whether prospective or current customers and whether collected directly or indirectly from them. As with Part I, it will cover existing laws – the California Consumer Privacy Act (CCPA) and Virginia’s Consumer Data Protection Act – and also will preview one of the state laws expected to soon cross the legislative process finish line.