VCDPA: Virginia's Data Protection Act

Official Name

VCDPA or SB 1392 Virginia Consumer Data Protection Act; personal data rights of consumer

Details About the VCDPA

The bill will be in effect starting January 1, 2023. 

Establishes a framework for controlling and processing personal data in the Commonwealth. The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers.

The bill outlines responsibilities and privacy protection standards for data controllers and processors. The bill does not apply to state or local governmental entities and contains exceptions for certain types of data and information governed by federal law.

Resources About the VCDPA:

• Official legislation here
• Article on our blog here
• A legal perspective here