Understanding the Virginia Consumer Data Protection Act (VCDPA)

Kristen Mathews authored an article for Thomson Reuters’ Practical Law Data Privacy & Cybersecurity discussing the Virginia Consumer Data Protection Act (VCDPA) and explaining the law’s consumer rights and protections, including personal data sale opt-out rights, targeted advertising opt-out rights, sensitive personal data use limitations, corresponding business obligations, and enforcement.

“On March 2, 2021, Virginia Governor Ralph Northam signed the Virginia Consumer Data Protection Act (VCPDA), a comprehensive data protection law that offers Virginia residents various rights regarding their personal data, imposes new requirements on businesses, and sets certain compliance procedures,” Kristen wrote. “The VCDPA impacts entities both in Virginia and around the world that collect and process Virginia residents’ personal data. The VCDPA took effect on January 1, 2023. The VCDPA does not grant the Virginia Attorney General or any agency rulemaking authority. Any changes to the VCDPA require legislative amendment.”

Read the full article (subscription required).