VCDPA: achieve compliance with Virginia’s Consumer Data Privacy Act
What is the VCDPA?
The Virginia Consumer Data Privacy Act (VCDPA) was the second modern and comprehensive data privacy law passed in the U.S. after California’s. It came into effect in 2023. It gives Virginia residents greater control over their personal data and requires businesses to be transparent about data collection and use. It also gives individuals rights, including access, deletion, and opt-out from certain uses of personal data.
Common VCDPA questions and answersCOMPLIANCE
How to comply with the Virginia data privacy law
To comply with the VCDPA, businesses must provide clear, up-to-date privacy notices, disclose data collection and sharing practices, and enable Virginia residents’ right to opt out of data sales and other covered uses. They must also obtain consent before collecting or processing minors’ personal data.
risks
What are the consequences of VCDPA noncompliance?
Penalties for noncompliance with VCDPA can lead to fines up to $7,500 per violation, regardless of whether the violation was intentional or not.
The Virginia Attorney General does have to provide notice of violation and a 30-day “cure” period. The VCPDA does not allow for private right of action.
your questions answered
Contact our expert team
Do you have questions about VCDPA compliance or consent management? We’re happy to answer questions and provide information about Usercentrics’ Consent Management Platform (CMP).
- Doing business in the state of Virginia and unsure whether your website is compliant with privacy law?
- Get in touch with us and learn all about how the Usercentrics Consent Management Platform can help you achieve VCDPA compliance.
- Looking to partner with us?
