The Consumer Data Protection Act is similar to California's data privacy law, though some say it should also give Virginians an individual right of enforcement.