![Reflecting on 5 Years of GDPR](https://images.squarespace-cdn.com/content/v1/60e8644b0615fa46b8034b47/1685372126868-WGQOWQJLO5Y7JDI30AP5/Press+Thumbnail+Images+%28Email+Header%29+%28Blog+Banner%29.png)
![sensitive personal information (SPI). Are you ready?](https://images.squarespace-cdn.com/content/v1/60e8644b0615fa46b8034b47/1671811799764-BVW2MTATT835E1CL1SJS/Press+Thumbnail+Images.png)
sensitive personal information (SPI). Are you ready?
Under the California Privacy Rights Act (“CPRA”) and the Virginia Consumer Data Protection Act (“VCDPA”), “sensitive personal information,” which has passed into U.S. privacy law, is an acknowledgment that specific personal data requires an explicit opt-in for this data to be used.