Index
Consumer ProtectionVirginia, USA

Virginia Consumer Data Protection Act (VCDPA)

Summary

Virginia was the second state in the U.S. (after California) to pass a comprehensive data privacy law giving consumers the right to control how companies collect and sell their personal information.

Rights & Rules

  • 01.
    You have the right to know if a business is processing your data, and to get a copy of it.
  • 02.
    You have the right to correct inaccuracies or demand the business delete your personal data.
  • 03.
    You can 'opt-out' of having your data sold to third parties or used for targeted advertising.
  • 04.
    Companies MUST get your explicit, affirmative consent before collecting 'sensitive' data (like racial origin, religious beliefs, health diagnosis, sexual orientation, or precise GPS location).

Penalties

  • 01.
    You cannot sue a company yourself for a violation. The Virginia Attorney General has exclusive authority to enforce the law and can levy fines of up to $7,500 per violation.

Verified Citations

Code of Virginia Title 59.1, Chapter 53

Source
"A consumer may invoke the consumer rights authorized pursuant to this subsection at any time... A consumer shall have the right to: 1. Confirm whether or not a controller is processing the consumer's personal data... 3. Delete personal data... 5. Opt out of the processing of the personal data for purposes of targeted advertising, the sale of personal data..."