Virginia Consumer Data Protection Act (VCDPA) Compliance

Summary

This practice note provides an overview of the scope, key terms, rights granted, obligations imposed, and remedies under the Virginia Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-575 et seq. The VCDPA, which becomes effective January 1, 2023, gives Virginia consumers the right to access, correct, and delete personal information collected or processed and the right to opt out of the sale and processing of personal data for advertising purposes. The VCDPA incorporates aspects of the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the EU General Data Protection Regulation (GDPR).