VCDPA: achieve compliance with Virginia’s Consumer Data Privacy Act
What is the VCDPA?
VCDPA is the consumer privacy law for the state of Virginia. It comes into effect on January 1, 2023. The VCDPA has similarities with the California Consumer Privacy Act (CCPA) as well as with the European General Data Protection Regulation (GDPR).
Common VCDPA questions and answersRISKS
What are the consequences of VCDPA noncompliance?
Penalties for noncompliance with VCDPA can lead to fines up to $7,500 per violation, regardless of whether the violation was intentional or not.
The Virginia Attorney General does have to provide notice of violation and a 30-day “cure” period. The VCPDA does not allow for private right of action.
COMPLIANCE
Why you need a consent management platform in order to comply with the VCDPA
Companies must inform consumers of their rights and provide a process to exercise those rights, including the ability to opt out of the sale of their personal data, or to have it deleted.
Companies must provide information about data processing, such as the purpose of processing and length of time the data will be kept to fulfill the processing purpose.
Consent must be obtained prior to collecting or processing sensitive data.
The Usercentrics Consent Management Platform (CMP) can enable companies to provide compliant notification to Virginia consumers, as well as enable secure collection and storage of their consent preferences.
your questions answered
Contact our expert team
Do you have questions about VCDPA compliance or consent management? We’re happy to answer questions and provide information about Usercentrics’ Consent Management Platform (CMP).
- Doing business in the state of Virginia and unsure whether your website is compliant with privacy law?
- Get in touch with us and learn all about how the Usercentrics Consent Management Platform can help you achieve VCDPA compliance.
- Looking to partner with us?