§ 59.1-575StatuteReference only

Definitions

Effective January 1, 2023Reviewed July 2026

Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.

What it requires

Defines key terms for the Virginia Consumer Data Protection Act (VCDPA), including consumer, controller, processor, personal data, sensitive data, consent, and sale of personal data. Under VCDPA, a consumer must be a Virginia resident acting in an individual or household context.

Legal text (excerpt)

Consumer means a natural person who is a resident of the Commonwealth acting only in an individual or household context. Consumer does not include a natural person acting in a commercial or employment context. [...] Sale of personal data means the exchange of personal data for monetary consideration by the controller to a third party.

Virginia Consumer Data Protection Act: § 59.1-575, Statute, effective 2023

Primary source

Virginia Office of the Attorney General: § 59.1-575: Definitions

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit