Va. Code §§ 59.1-575 et seq. (Title 59.1, Chapter 53) · Last verified
Virginia Consumer Data Protection Act
Virginia's Consumer Data Protection Act has no revenue threshold: scope turns on consumer counts, and the statute's own exemption list is reproduced here. Reproduced here in its own wording with section numbers and a link to the official Virginia Law text — this page does not interpret it or assess whether it applies to any organisation.
- Citation
- Va. Code §§ 59.1-575 et seq. (Title 59.1, Chapter 53)
- Jurisdiction
- US — Virginia
- Regulator
- Virginia Attorney General
- Last verified
What it is
Reproduced here in its own wording with section numbers and a link to the official Virginia Law text — this page does not interpret it or assess whether it applies to any organisation.
Scope
§ 59.1-576 — Scope; exemptions
A. This chapter applies to persons that conduct business in the Commonwealth or produce products or services that are targeted to residents of the Commonwealth and that (i) during a calendar year, control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data.
B. This chapter shall not apply to any (i) body, authority, board, bureau, commission, district, or agency of the Commonwealth or of any political subdivision of the Commonwealth; (ii) financial institution or data subject to Title V of the federal Gramm-Leach-Bliley Act (15 U.S.C. § 6801 et seq.); (iii) covered entity or business associate governed by the privacy, security, and breach notification rules issued by the U.S. Department of Health and Human Services, 45 C.F.R. Parts 160 and 164 established pursuant to HIPAA, and the Health Information Technology for Economic and Clinical Health Act (P.L. 111-5); (iv) nonprofit organization; or (v) institution of higher education.
Sources
Last verified:
This page is for information only and is not legal advice. It reproduces the regulation's own wording; always confirm against the primary source linked above and consult qualified counsel for how it applies to your organisation.