Virginia Consumer Data Protection Act

Virginia's comprehensive consumer privacy law gives residents rights to access, correct, delete, and port their personal data and to opt out of targeted advertising, sale, and significant-decision profiling, with an appeal process. Controllers need opt-in consent for sensitive data, must run data protection assessments for higher-risk processing, and face extra limits on known children's data (2025) and a ban on selling precise geolocation data (from July 1, 2026). Section 59.1-577.1 on minors' social media time limits is listed as a separate entry because it is enjoined.