VCDPA § 59.1-584
Enforcement; civil penalty; expenses
Reference only. The Privisy audit does not test this section.
- Source
- Statute
- In force from
- January 1, 2023
- Last reviewed
- September 2026
- Framework
- VCDPA
What it requires
Vests exclusive enforcement authority in the Virginia Attorney General and denies a private right of action for consumers. Requires a 30-day notice and cure period before initiating actions, and allows civil penalties of up to $7,500 per violation and recovery of reasonable investigative expenses.
Statute text
The Attorney General shall have exclusive authority to enforce the provisions of this chapter. [...] Prior to initiating any action under this chapter, the Attorney General shall provide a controller or processor 30 days' written notice identifying the specific provisions of this chapter the Attorney General alleges have been or are being violated.
Virginia Consumer Data Protection Act, § 59.1-584Read the full section from Virginia Office of the Attorney General
This page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.