New Virginia Consumer Data Protection Act (VCDPA), eff 1/1/23

Hello!Since your business is located in the State of Virginia,  we wanted to give you an overview of the new VCDPA (Virginia Consumer Data Protection Act) eff 1/1/23.Overview:The VCDPA gives consumers the right to access their data and request that their personal information be deleted by businesses. It also requires companies to conduct data protection assessments related to processing personal data for targeted advertising and sales purposes.The VCDPA applies to companies that:Conduct business in Virginia or market their goods and services to Virginia residents; and Either:

• Control or process the personal data of at least 100,000 Virginia residents; or

• Control or process the personal data of at least 25,000 Virginia residents and derive more than 50% of their gross revenue from the sale of personal data

The action items for your business that we will prepare for you:1.Update your privacy notice 2.Update your privacy policy on your website3.Controllers need to conduct a data protection assessment (DPA) for processing activities that present a heightened risk of harm to a consumer.We will need to include the following verbiage: 

• Applicability

• Right to Delete

• Access and Data Portability

• Targeted advertising

• Children’s Data

More to come…