VCDPA-ready consent for Virginia
The Virginia Consumer Data Protection Act means opt-out of targeted ads and sale, opt-in for sensitive data, and honoring universal opt-out signals. ConsentX does all three. Live in about five minutes.
Free forever for one site. No credit card.
We value your privacy
We use cookies to improve your experience. Choose what you allow. Non-essential trackers stay blocked until you say yes.
An EU-style banner is not what Virginia asks for
VCDPA is opt-out for targeted ads and sale, opt-in for sensitive data, and it requires you to recognize universal opt-out signals. A generic accept or reject banner can miss all three.
Opt-out
of targeted advertising, sale and certain profiling.
Opt-in
consent is required before processing sensitive data.
Up to $7,500
per violation, enforced by the Virginia Attorney General.
How ConsentX keeps you on the right side of VCDPA
Opt-out controls, sensitive-data opt-in, universal opt-out and evidence, the four things Virginia checks.
Opt-out of targeted ads, sale and profiling
ConsentX gives Virginia consumers clear controls to opt out of targeted advertising, the sale of personal data and certain profiling, with equal-weight choices and no dark patterns.
Opt-in gating for sensitive data
VCDPA requires consumer opt-in before you process sensitive personal data. ConsentX gates sensitive categories behind explicit opt-in, so nothing in that category runs until the consumer agrees.
Universal opt-out and GPC, honored
VCDPA recognizes universal opt-out signals. ConsentX honors Global Privacy Control automatically and treats it as a valid opt-out, so you respect a browser-level signal without extra work.
DSAR workflow with provable evidence
Handle Virginia consumer rights requests with a built-in DSAR workflow, and back every choice with tamper-evident SHA-256 receipts you can verify if the Attorney General asks.
Virginia is one of many. Per-state and per-region rules apply automatically
A generic banner vs VCDPA-tuned consent
Generic banner
- ✕ No targeted-ad or sale opt-out
- ✕ Sensitive data not gated for opt-in
- ✕ Universal opt-out and GPC ignored
- ✕ Stores a row, hard to prove later
ConsentX
- Opt-out of targeted ads, sale and profiling
- Opt-in gating for sensitive categories
- Universal opt-out and GPC honored
- Tamper-evident SHA-256 evidence chain
ConsentX helps you comply with the VCDPA. It does not by itself guarantee compliance. Verify your configuration against your own legal advice.
Virginia VCDPA consent questions
Does VCDPA require opt-in for sensitive data?+
Yes. Processing sensitive personal data in Virginia requires the consumer's opt-in consent. ConsentX gates sensitive categories behind explicit opt-in, so they stay inactive until the consumer agrees.
Can consumers opt out of targeted advertising under VCDPA?+
Yes. The VCDPA gives consumers the right to opt out of targeted advertising, the sale of personal data and certain profiling. ConsentX provides clear opt-out controls with equal-weight choices.
Does ConsentX honor universal opt-out signals in Virginia?+
Yes. ConsentX honors the Global Privacy Control signal automatically and treats it as a valid opt-out, which aligns with VCDPA's recognition of universal opt-out mechanisms.
What are the penalties under the VCDPA?+
The VCDPA allows penalties of up to 7,500 dollars per violation, enforced by the Virginia Attorney General. ConsentX helps you comply with opt-out controls, sensitive-data opt-in and evidence, though it cannot guarantee compliance on its own.
Who does the VCDPA apply to?+
It applies to businesses that process the data of 100,000 or more Virginia consumers, or 25,000 or more while deriving over half of revenue from selling data. ConsentX helps either way with a free plan to start.
Get VCDPA-ready consent live in minutes.
Opt-out controls, sensitive-data opt-in and universal opt-out, with evidence you can prove. Free to start, no credit card.