Virginia consumer data privacy act

Betegnelse

Betegnelse

Va. Code §§ 59.1-575 to 59.1-585

Nivå

Delstat VA

Status

I kraft

Vedtatt

2021-03-02

Gjelder fra

2023-01-01

Tilsynsorganer

Virginia AG

Navngitte krav

• Applicability and thresholds

  Va. Code §§ 59.1-575 to 59.1-585

  100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.

• Privacy notice

  Va. Code §§ 59.1-575 to 59.1-585

  A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.

• Consumer rights

  Va. Code §§ 59.1-575 to 59.1-585

  Access, deletion, portability and opt-out of targeted advertising, sale and certain profiling, with an appeal route.

• Sensitive data

  Va. Code §§ 59.1-575 to 59.1-585

  Consent, or in some states a strict necessity standard, before sensitive categories are processed.

• Data protection assessment

  Va. Code §§ 59.1-575 to 59.1-585

  A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.

• Processor contract

  Va. Code §§ 59.1-575 to 59.1-585

  A written contract that sets instructions, confidentiality, deletion or return, and audit rights.

• Enforcement

  Va. Code §§ 59.1-575 to 59.1-585

  Enforced by the state authority. No cure period after 1 January 2025 in the enforcement provision as amended.

Offisiell kilde

• law.lis.virginia.gov
• www.oag.state.va.us

EU-rettsakter på samme område

• gdpr

  Dekker samme grunn som personvernforordningen for informasjon, rettigheter og databehandleravtaler, men med smalere virkeområde og uten et generelt krav om rettslig grunnlag.