US state privacy, US state consumer privacy
Va. Code §§ 59.1-575 to 59.1-585
- What this page is
- US state privacy, US state consumer privacy
- Checked against the official source
- 2026-08-15Changed
- Responsible publisher
- ExploreWorld Legal, editorial deskLiability position
Short answer
Does US state privacy apply to your operation, and which paragraph decides?
US state privacy rests on Va. Code §§ 59.1-575 to 59.1-585 and is tested here by a deterministic rule tree of 3 rules with a coverage score of 86 percent. The tree reads your facts, names the paragraph that decides the question and returns an outcome carrying citation, content hash and read date 2026-08-15. The outcome is a machine classification, not a compliance decision.
Va. Code §§ 59.1-575 to 59.1-585Checked against the publisher 2026-08-15Official text
A source reference, not legal advice.
The full basis, ready-made
GDPR incident pack, total 98.75 € (about 107 USD)
Evidence chain and hash per row included. One-time purchase, delivered instantly.
- Jurisdiction
- State VA, State CO, State CT, State TX, State UT
- Risk dimensions
- privacy, operations
- Tier
- Tier 1
- Coverage
- 86 %
- Impact
- 5/5
- Read
- 2026-08-15
Source chain
Every block in the register row has its own address, so an outcome can be cited down to the paragraph. The node carries the reference, the scope, the link to the official text and the outcomes in the tree that rest on the block.
- Applicability and thresholds
Va. Code §§ 59.1-575 to 59.1-585
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
- Privacy notice
Va. Code §§ 59.1-575 to 59.1-585
A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.
- Consumer rights
Va. Code §§ 59.1-575 to 59.1-585
Access, deletion, portability and opt-out of targeted advertising, sale and certain profiling, with an appeal route.
- Sensitive data
Va. Code §§ 59.1-575 to 59.1-585
Consent, or in some states a strict necessity standard, before sensitive categories are processed.
- Data protection assessment
Va. Code §§ 59.1-575 to 59.1-585
A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.
- Processor contract
Va. Code §§ 59.1-575 to 59.1-585
A written contract that sets instructions, confidentiality, deletion or return, and audit rights.
- Enforcement
Va. Code §§ 59.1-575 to 59.1-585
Enforced by the state authority. No cure period after 1 January 2025 in the enforcement provision as amended.
Va. Code §§ 59.1-575 to 59.1-585
Rule tree
Rules are tested top down. Conditions are statutory elements and each outcome points to the register blocks it rests on.
sp-sensitive-no-consent
Sensitive data is processed without consent
prohibited · Requirement applies · sensitive, scope
Va. Code § 59.1-578(A)(5), Colo. Rev. Stat. § 6-1-1308(7) and Conn. Gen. Stat. § 42-520(a)(4) require consent before sensitive data is processed. Texas and Utah set equivalent duties, Utah through clear notice and an opt-out.
sp-assessment
Opt-out rights and a data protection assessment are required
risk · Requirement applies · rights, assessment, notice
The consumer may opt out of targeted advertising and sale (Va. Code § 59.1-577(A)(5)), and a documented data protection assessment is required for that processing (Va. Code § 59.1-580). Colorado, Connecticut and Texas set equivalent rules.
sp-threshold
The business is within scope of state privacy law
risk · Requirement applies · scope, notice, rights, processor
The threshold is 100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data (Va. Code § 59.1-576). A privacy notice, consumer rights and processor contracts are required.
Outcome
allowed · Outside the scope
The rule yields no requirement for the facts supplied
No processing above the thresholds of the five states is stated. Texas has no volume threshold for businesses that are not small businesses; check Tex. Bus. & Com. Code § 541.002 separately.
fallback · sha256:sha256:850bb30547e1e6e0a50db391d
Monitoring
The journal shows what moved in the register row, with the hash before and after. The impact score follows a rule stated in plain words.
How impact is scored: Grund: tillagd eller borttagen uppgift ger 3, ändrad uppgift 2, omläsning utan ändring 0. Tillägg: +1 när ändringen rör status eller tillämpningsdatum. Tillägg: +1 när agenten ligger i klass 1. Siffran begränsas till 0 till 5.
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2024-07-01 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2023-12-31 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2023-07-01 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2023-07-01 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2023-06-18 · 5/5 · antagande, identifierare, status
Regeln antogs enligt Tex. Bus. & Com. Code ch. 541
2023-01-01 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2022-05-10 · 5/5 · antagande, identifierare, status
Regeln antogs enligt Conn. Gen. Stat. §§ 42-515 to 42-525
Supervision
- Office of the Attorney General of Virginia
- Colorado Department of Law, Attorney General
- Office of the Attorney General of Connecticut
- Office of the Attorney General of Texas
- Utah Division of Consumer Protection
European counterparts
- gdpr · Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.
- gdpr · Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.
- gdpr · Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.
- gdpr · Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.
- gdpr · Täcker samma mark som dataskyddsförordningen när det gäller information, rättigheter och biträdesavtal, men med smalare tillämpning och utan ett allmänt krav på rättslig grund.
Artifacts and integrity
- https://legal.exploreworldai.com/api/public/v1/us-agents/us-state-privacy/manifest.json
- https://legal.exploreworldai.com/api/public/v1/us-agents/us-state-privacy/run
- https://legal.exploreworldai.com/api/public/v1/us-agents/us-state-privacy/monitor.json
- sha256:b819d6d2068bfbee4f4d40edcd939a7de90bc343375abae34948cd1e0f8b8f35
- sha256:5bf5aacebfd11aab5a6c7fa07aca72f80369e49b459e1198b3dd0040a1cc79f5
The verdict is a machine classification of the outcome, not legal advice and not a compliance decision. Responsibility position · Va. Code §§ 59.1-575 to 59.1-585
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act