North AmericaSigned into law March 2021; effective January 1, 2023.

Virginia Consumer Data Protection Act

A comprehensive US state privacy law granting Virginia consumers distinct rights regarding their personal data, fundamentally resembling CCPA/GDPR.

Last Indexed via EchelonGraph Automations: March 4, 2026

Global Scope & Applicability

Entities conducting business in Virginia that control/process data of at least 100,000 consumers, or derive 50%+ revenue from sale of data of 25,000 consumers.

Core Principles & Obligations

  • 1

    Right to Access

  • 2

    Right to Correct

  • 3

    Right to Delete

  • 4

    Right to Data Portability

  • 5

    Right to Opt-Out (Targeted Ads/Sale/Profiling)

Technical Implementation Examples

  • Automated detection of unencrypted AWS S3 buckets violating Virginia Consumer Data Protection Act policies.

  • Real-time interception of unauthorized IAM role escalation attempts.

  • Continuous audit logging and Zero-Knowledge Proof attestation of compliant clusters.

Non-Compliance Penalties

Financial Fines

Civil penalties of up to $7,500 per violation levied by the Virginia Attorney General.

Legal Liability

No private right of action, avoiding class-action lawsuits directly from consumers.

Master North America Compliance with EchelonGraph

We are building the ultimate continuous compliance platform. Our upcoming AI agents will automatically map your cloud footprints against these precise Virginia Consumer Data Protection Act legal controls, alerting you to architectural drift before auditors do.

Join the Developer Waitlist