We monitor companies that send data breach notification letters to Virginia residents and report to the Virginia Attorney General. If you received a breach notice, you may qualify for compensation — at no cost to you.
Virginia Consumer Data Protection Act (VCDPA) & Code of Virginia § 18.2-186.6
Virginia enacted the VCDPA in 2021, one of the first comprehensive state privacy laws after California. Notification is required within 60 days and the AG has exclusive enforcement authority with civil penalties up to $7,500 per violation. The VCDPA gives residents rights to access, correct, and delete their data.
Virginia residents have comprehensive rights under the VCDPA. While the AG has exclusive enforcement authority (no private right of action under the VCDPA), breach notification violations remain actionable through existing common law claims.
No notification letters on file for Virginia yet. We update daily from the Virginia AG database.
Received a data breach notification letter from a company in Virginia? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →