Virginia

Overview

Virginia was the second U.S. state to pass a comprehensive data privacy law. The VCDPA establishes a framework for how businesses handle personal data and gives consumers specific rights. While less stringent than California’s laws, it still creates clear rules on data collection, sharing, and usage, particularly for larger businesses and tech companies.

Key Laws

Virginia Consumer Data Protection Act (VCDPA) – Effective January 1, 2023

It is a state law that grants Virginia residents greater control over their personal data and imposes obligations on businesses that collect, process, or sell that data.

Consumer Rights

Know what personal data is collected about them

Request deletion of their personal data

Fix inaccurate data

Say no to targeted advertising, data sale, and profiling

Obtain their data in a portable format

Who the Law Applies to?

  • Control the personal data of at least 100,000 consumers in a calendar year

  • Control the personal data of at least 25,000 residents

  • Get over 50% of their gross revenue from the sale of personal data