Fast.  Secure.  Free.  Forever.
Virginia State Privacy Law
Effective January 1, 2023

Virginia Consumer Data Protection Act
(VCDPA)

The Virginia Consumer Data Protection Act (VCDPA) gives Virginia residents the right to access, delete, and opt out of the sale of their personal data.

VCDPA
Law Abbreviation
$7,500
Max Fine Per Violation
45
Days to Respond
100,000
Coverage Threshold
Your Rights Under VCDPA

What the law gives you

The Virginia Consumer Data Protection Act (VCDPA) grants residents the following legally enforceable rights over their personal data:

Access
Request a copy of the personal data a company holds about you.
Delete
Demand deletion of personal data provided by or obtained about you.
Correct
Require correction of inaccurate personal data.
Portability
Receive your data in a portable, machine-readable format.
Opt Out
Opt out of the sale of personal data or targeted advertising.
Appeal
Appeal a controller’s decision to deny your rights request within 60 days.
How to Exercise Your Rights

Step by step

01
Submit a rights request directly to the company’s designated privacy contact.
02
The company has 45 days to respond, with a possible 45-day extension.
03
If denied, submit an appeal. The company must respond within 60 days.
04
If the appeal is denied, you may file a complaint with the Virginia AG.
ClickOff makes this automatic. Rather than submitting individual requests to hundreds of data brokers, ClickOff acts as your authorized agent under the VCDPA and all applicable state laws — submitting deletion requests to 200+ brokers simultaneously. Free forever.
Delete your data under VCDPA.
Free forever. Legal receipt generated instantly. 45-day compliance clock starts now.
Delete My Data From Every Broker →
Related Laws

Other privacy laws that protect you

CCPA — California → SB 362 — Delete Act → ADPA — Federal → All Your Rights →
VCDPA questions
Virginia privacy law,
explained.
Who enforces the VCDPA?
The Virginia Attorney General has exclusive enforcement authority. There is no private right of action — individuals cannot sue companies directly under the VCDPA.
Does the VCDPA cover data brokers?
Yes. Data brokers that process Virginia residents’ data must comply with VCDPA obligations including responding to deletion requests within 45 days.
How is the VCDPA different from CCPA?
The VCDPA has no private right of action and applies to businesses processing data from 100,000+ consumers annually. The CCPA applies to businesses with $25M+ revenue or 100,000+ consumer records.
How does ClickOff help me use my VCDPA rights?
ClickOff acts as your authorized agent under the VCDPA and all applicable state laws. Instead of sending individual deletion requests to hundreds of data brokers one by one, ClickOff submits on your behalf to 200+ brokers simultaneously — with a legal receipt generated instantly. Free forever.