Virginia the second state in US to pass comprehensive data privacy law