If you’re operating in Virginia, there’s a new law in town that you need to know about. The Virginia Consumer Data Protection Act (VCDPA) is shaking things up in the world of data privacy and protection, and it’s important to understand what it means for your business.
Don’t worry, though—we’re here to break it down for you in an easy-to-understand way:
- What is the Virginia’s Consumer Data Protection Act?
- Who does the VCDPA apply to?
- What are consumer rights under the Virginia’s Consumer Data Protection Act?
- What is required in a Privacy notice in Virginia?
- Do I need Opt Out Links under the Virginia’s Consumer Data Protection Act
- Compliance with the Virginia’s Consumer Data Protection Act
What is the Virginia’s Consumer Data Protection Act?
The Virginia Consumer Data Protection Act (VCDPA) is a new law that aims to protect the personal data of Virginia residents.
Who does the VCDPA apply to?
The VCDPA applies to businesses that collect, process, and control the data of more than 100,000 Virginia consumers or that derive more than 50% of their gross revenue from the sale of personal data and process the data of at least 25,000 Virginia consumers.
🎯 If you’re still not sure if the Virginia Consumer Data Protection Act applies to you? You can take this quiz and find out!
What are consumer rights under the Virginia’s Consumer Data Protection Act?
What is required in a Privacy notice in Virginia?
Do I need Opt Out Links under the Virginia’s Consumer Data Protection Act?
Short answer: No.
The VCDPA does not explicitly state that opt-out links allowing users to refuse the processing of their personal data for specific purposes are necessary.
Compliance with the Virginia’s Consumer Data Protection Act
You likely won’t need to do anything to get your website into compliance with Virginia’s VCDPA if you’re currently in compliance with the GDPR and California’s CCPA/CPRA.
However, it’s important that you take into account how privacy laws are evolving across the US and examine how you can adhere to even the most stringent privacy standards.