Legal Glossary

Definition of Virginia Consumer Data Protection Act (VDCPA)

A statute known as the Virginia Consumer Data Protection Act (VDCPA) was created to safeguard the personal information of Virginians.

Any website or online service that gathers, utilizes, or keeps data from Virginia residents is subject to it.

According to the VDCPA, businesses must give customers access to the data they have provided, give users the option to opt out of specific data processing activities, establish reasonable security measures to protect consumer data, and give users clear and concise notice about their data collection practices.

Companies must also abide by the VDCPA’s notification obligations for data breaches. Heavy fines and other punishments may be imposed for breaking these rules.

Back to glossary index