PrivacyTerrainStructured privacy law intelligence

north america

Virginia

Virginia's Consumer Data Protection Act is an early US comprehensive state privacy law and should be read within the broader fragmented US model.

Primary lawVirginia Consumer Data Protection Act
Statusin-force
Last reviewed17/04/2026
Coverage qualityseeded-expanded
Confidencemedium
Primary sources1
Secondary sources0
Last checked17/04/2026
Freshnessstale
Review prioritymedium

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Early US state privacy regime with core rights and enforcement structure seeded, but broader operational nuance still needs expansion.

Parent context: This jurisdiction sits within United States, and should be interpreted as part of that broader regime structure.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Requires legal basisYes1 primary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Requires legal basis
YesSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Processing requires a statutory processing purpose / controller basis structure under the VCDPA.

Rights

Right of access
YesSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Consumers have a statutory access right under the VCDPA.
Right to appeal
YesSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Consumers have a statutory right to appeal controller refusal of rights requests under the VCDPA.
Right to delete
YesSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Consumers have a statutory deletion right under the VCDPA.
Right to correct
YesSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Consumers have a statutory correction right under the VCDPA.
Opt-out rights summary
Targeted advertising, sale, profilingSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Virginia provides opt-out rights for targeted advertising, sale, and certain profiling uses.

Enforcement

Private right of action
NoSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: The VCDPA does not create a general private right of action.
Enforcement authority summary
Virginia Attorney GeneralSupport: 1 primary • Reviewed 17/04/2026Sources: Virginia legislative information (primary)Note: Virginia assigns enforcement to the state Attorney General rather than a general private action model.

Official sources

Recent change workflow