VCDPA compliance with ConsentX
Virginia Consumer Data Protection Act
Virginia, USA
In force since 2023
United States
Who it applies to
Businesses that process data of 100,000+ Virginia consumers, or 25,000+ while deriving over half of revenue from selling data.
Penalties
Up to $7,500 per violation, enforced by the Virginia Attorney General.
Key obligations
- Offer opt-out of targeted ads, sale and profiling
- Get opt-in consent for sensitive data
- Honor consumer rights requests
- Provide a clear privacy notice
- Recognize universal opt-out signals
How ConsentX helps
Opt-out controls for targeted ads and sale
Opt-in gating for sensitive categories
Universal opt-out / GPC handling
DSAR workflow with evidence
Get VCDPA ready with ConsentX
Start free, or book a walkthrough with our team.
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified counsel.
Frequently asked questions
Does VCDPA require opt-in for sensitive data?+
Yes. Processing sensitive personal data in Virginia requires the consumer's opt-in consent.
Can consumers opt out of targeted advertising?+
Yes, VCDPA gives a right to opt out of targeted advertising, sale and certain profiling.