Virginia · Privacy Notice
Virginia Privacy Rights Request
Virginia's Consumer Data Protection Act (VCDPA, Va. Code § 59.1-575, effective January 2023) grants Virginia residents rights to access their personal data, request deletion, correct inaccuracies, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and profiling for significant decisions. Controllers have 45 days to respond. The Virginia AG has sole enforcement authority. There is no private right of action, but AG enforcement has been active.
Virginia's Consumer Data Protection Act (VCDPA, effective Jan 2023) gives Virginia residents rights to access, delete, correct, and opt out of targeted advertising and sale of personal data.
Governing law
Va. Code § 59.1-575 et seq. (VCDPA)
Start Your Virginia Privacy Rights Request
Cites Va. Code § 59.1-575 et seq. (VCDPA). Formatted for USPS Certified Mail. Instant PDF.
Start My Letter →Instant PDF download
Virginia Privacy Notice FAQs
What are my rights under Virginia's VCDPA?▾
Under Va. Code § 59.1-577: Right to confirm whether personal data is processed, Right of access, Right to delete, Right to correct, Right to data portability, Right to opt out of targeted advertising / sale / profiling. Controllers have 45 days to respond; may extend 45 more days with notice.
Does the VCDPA apply to all businesses?▾
No. The VCDPA applies to businesses that process personal data of 100,000+ Virginia consumers annually, or of 25,000+ consumers while deriving more than 50% of gross revenue from data sales. Small businesses are generally exempt.
How do I exercise my VCDPA rights?▾
Submit a verifiable consumer request through the business's designated method (required to be provided). A formal written letter citing Va. Code § 59.1-577 and the specific right you are exercising is always valid. If the business denies your request, it must provide reasons, and you can appeal within 60 days.
kweldoc is a document drafting tool, not a law firm.