{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/us-state-privacy/sensitive",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/us-state-privacy/sensitive)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-09-24",
    "fingerprint": "ewai:eu:3cdf73",
    "proof": "sha256:e5a89ff36f7b6a4115ebd13137ef30f520fe2d957e44ad530a7710faeadf2899",
    "jurisdiction": "eu"
  },
  "layer": "us-agent-section",
  "agent": "us-state-privacy",
  "slug": "sensitive",
  "title": "Sensitive data",
  "reference": "Va. Code §§ 59.1-575 to 59.1-585",
  "scope": "Consent, or in some states a strict necessity standard, before sensitive categories are processed.",
  "rule": "virginia-vcdpa",
  "identifier": "Va. Code §§ 59.1-575 to 59.1-585",
  "jurisdiction_scope": [
    "state:VA",
    "state:CO",
    "state:CT",
    "state:TX",
    "state:UT"
  ],
  "risk_dimensions": [
    "privacy",
    "operational"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": "https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/",
  "register_source": "https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/",
  "cited_by": [
    {
      "ruleId": "sp-sensitive-no-consent",
      "code": "sp-sensitive",
      "title": "Känsliga uppgifter behandlas utan samtycke",
      "titleEn": "Sensitive data is processed without consent",
      "verdict": "förbjudet",
      "audit": "KRAV_GÄLLER",
      "obligation": "Va. Code § 59.1-578(A)(5), Colo. Rev. Stat. § 6-1-1308(7) och Conn. Gen. Stat. § 42-520(a)(4) kräver samtycke innan känsliga uppgifter behandlas. Texas och Utah har motsvarande krav, Utah i form av tydlig information och möjlighet att avstå.",
      "obligationEn": "Va. Code § 59.1-578(A)(5), Colo. Rev. Stat. § 6-1-1308(7) and Conn. Gen. Stat. § 42-520(a)(4) require consent before sensitive data is processed. Texas and Utah set equivalent duties, Utah through clear notice and an opt-out."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/us-state-privacy/sensitive",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/us-state-privacy",
  "hash": "sha256:e5a89ff36f7b6a4115ebd13137ef30f520fe2d957e44ad530a7710faeadf2899",
  "citation": "Va. Code §§ 59.1-575 to 59.1-585, US state privacy, Delstatlig integritetsrätt. NovaCopilot, https://legal.exploreworldai.com/us/agent/us-state-privacy (hämtad 2026-08-15, bevis sha256:d64531778d73d1d6, bygge legal-2026-09-24).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-09-24",
  "expires": "2026-09-25T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-09-24+legal-2026-09-24+2026-09-24T13:58:59",
    "content_hash": "sha256:e5a89ff36f7b6a4115ebd13137ef30f520fe2d957e44ad530a7710faeadf2899",
    "revalidate_after": "2026-09-24T19:41:08.879Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}