The Virginia Consumer Data Protection Act (VCDPA), effective April 11, 2021, was enacted to protect Virginia residents from the theft and misuse of sensitive consumer information. The VCDPA applies to businesses that collect personal information from consumers in connection with the sale or advertisement of any good or service.
The VCDPA
- Requires businesses to obtain consent from consumers before collecting and sharing their personal information with third parties.
- Requires businesses to provide clear notices about how they will use data and what happens when a consumer opts out of certain uses of their data.
- Allows consumers to access their information and correct any errors in it.
- Gives consumers the ability to sue when companies violate the law.