We monitor data breaches reported to the Virginia Attorney General. If your information was exposed, you may qualify for compensation — at no cost to you.
Virginia Consumer Data Protection Act (VCDPA) & Code of Virginia § 18.2-186.6
Virginia enacted the VCDPA in 2021, one of the first comprehensive state privacy laws after California. Notification is required within 60 days and the AG has exclusive enforcement authority with civil penalties up to $7,500 per violation. The VCDPA gives residents rights to access, correct, and delete their data.
Virginia residents have comprehensive rights under the VCDPA. While the AG has exclusive enforcement authority (no private right of action under the VCDPA), breach notification violations remain actionable through existing common law claims.
No active cases found for Virginia at this time. Check back — we update daily from the Virginia AG database.
Were you affected by a Virginia data breach? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →