Virginia’s New Privacy Law Is Just Different Enough to Give Compliance Headaches