VCDPA: achieve compliance with Virginia’s Consumer Data Privacy Act
VCDPA is the consumer privacy law for the state of Virginia. It comes into effect on January 1, 2023. The VCDPA has similarities with the California Consumer Privacy Act (CCPA) as well as with the European General Data Protection Regulation (GDPR).
Common VCDPA questions and answersRISKS
Penalties for noncompliance with VCDPA can lead to fines up to $7,500 per violation, regardless of whether the violation was intentional or not.
The Virginia Attorney General does have to provide notice of violation and a 30-day “cure” period. The VCPDA does not allow for private right of action.
COMPLIANCE Companies must inform consumers of their rights and provide a process to exercise those rights, including the ability to opt out of the sale of their personal data, or to have it deleted. Companies must provide information about data processing, such as the purpose of processing and length of time the data will be kept to fulfill the processing purpose. Consent must be obtained prior to collecting or processing sensitive data. The Usercentrics Consent Management Platform (CMP) can enable companies to provide compliant notification to Virginia consumers, as well as enable secure collection and storage of their consent preferences.
your questions answered Do you have questions about VCDPA compliance or consent management? We’re happy to answer questions and provide information about Usercentrics’ Consent Management Platform (CMP).
Contact sales