
Virginia Consumer Rights Exercise & Appeal Processing Kit
Virginia's CDPA gives consumers 5 distinct rights with a 45-day response window and a formal appeal process. When someone exercises a right, you need a documented intake, response, and — if you deny the appeal — an AG complaint referral notice. This kit covers the full lifecycle.
Does This Apply to You?
- You do business in Virginia or target Virginia residents
- You process personal data of 100,000+ consumers per year
- OR: You derive 50%+ of revenue from data sales and process data of 25,000+ consumers
- You use that data for targeted advertising, profiling, or automated decisions
Controllers doing business in VA or targeting VA residents that (1) process personal data of 100,000+ consumers/year OR (2) derive 50%+ revenue from data sales and process data of 25,000+ consumers.

What's Included (3 Documents)
Rights Request Intake Form
Appeal Workflow
AG Complaint Referral Notice
What Happens Without Compliance
Virginia Attorney General exclusive enforcement (§ 59.1-584(A)). No private right of action. AG must provide 30-day cure period before seeking penalties (§ 59.1-584(B)). Civil penalties up to $7,500 per violation (§ 59.1-584(C)).
Maximum: Up to $7,500 per violation (§ 59.1-584(C))
Preview Your Documents
See what your compliance package includes — sample shown with example data
See Inside Your Documents
Sample page using demo data. Your documents will include your company name, AI systems, and compliance details.

All documents include electronic signature blocks compliant with the ESIGN Act (15 U.S.C. § 7001) and UETA.
What Happens After You Purchase
Your documents generate instantly as fillable PDFs, packaged in a single zip file.
Download directly to your device or email to up to 3 team members.
Fill in the highlighted form fields with your company-specific information. Each document includes clear instructions.
Sign using the electronic signature blocks — ESIGN Act compliant, no printing required.
Have your legal team review the completed documents before deployment.
Statutory Authority
Citation: Va. Code §§ 59.1-575 through 59.1-584
View official source(opens in new tab)Complete Package
$99
One-time purchase. Instant download.
- 3 customized documents
- Instant digital download
- Based on Va. Code §§ 59.1-575 through 59.1-584
- Secure checkout via Stripe
Purchase now, customize your documents after checkout
vs. thousands at a law firm
Verified against enacted statute text
Source: Va. Code §§ 59.1-575 through 59.1-584Questions before purchasing? Email us
Customize Your VA Consumer Rights Kit Package
Fill in your company details below. Your answers will be used to pre-fill your compliance documents.
Step 1 of 3
Company Information
You May Also Need
Strengthen your compliance program with related documentation.
NYC Local Law 144
If you hire in New York City and use any automated tool to screen or evaluate candidates, you need a...
Texas TDPSA
The Texas Data Privacy and Security Act requires data protection assessments for targeted advertisin...
Texas TRAIGA
Texas HB 149 — the Responsible AI Governance Act — took effect January 1, 2026 and applies to any bu...