Skip to main content
IN EFFECTEffective: January 1, 2023

Virginia CDPA — Consumer Data Privacy & AI Profiling

If your business processes personal data from Virginia consumers and uses it for targeted ads, profiling, or automated decisions, the VCDPA requires documented data protection assessments. This package includes the assessments, privacy notice, and opt-out documentation.

$249one-time purchase
6 documents included
Max penalty: Up to $7,500 per violation (§ 59.1-584(C))
Secure checkout via Stripe

Does This Apply to You?

  • You do business in Virginia or target Virginia residents
  • You process personal data of 100,000+ consumers per year
  • OR: You derive 50%+ of revenue from data sales and process data of 25,000+ consumers
  • You use that data for targeted advertising, profiling, or automated decisions

Controllers doing business in VA or targeting VA residents that (1) process personal data of 100,000+ consumers/year OR (2) derive 50%+ revenue from data sales and process data of 25,000+ consumers.

Compliance document on tablet at desk

What's Included (6 Documents)

Privacy Notice Template

Data Protection Assessment

A documented evaluation weighing the benefits of your data processing against the risks to consumers. Required by most state privacy laws.

Consumer Rights Request Procedures

Opt-Out Documentation

The mechanism and process for consumers to opt out of data processing, profiling, or targeted advertising.

Data Processing Agreement Template

Compliance Checklist

Every step you need to take, in order, so nothing gets missed.

What Happens Without Compliance

Virginia Attorney General exclusive enforcement (§ 59.1-584(A)). No private right of action. AG must provide 30-day cure period before seeking penalties (§ 59.1-584(B)). Civil penalties up to $7,500 per violation (§ 59.1-584(C)).

Maximum: Up to $7,500 per violation (§ 59.1-584(C))

Preview Your Documents

See what your compliance package includes — sample shown with example data

See Inside Your Documents

Sample page using demo data. Your documents will include your company name, AI systems, and compliance details.

Sample document preview for Virginia CDPA
View full size

All documents include electronic signature blocks compliant with the ESIGN Act (15 U.S.C. § 7001) and UETA.

What Happens After You Purchase

Your documents generate instantly as fillable PDFs, packaged in a single zip file.

Download directly to your device or email to up to 3 team members.

Fill in the highlighted form fields with your company-specific information. Each document includes clear instructions.

Sign using the electronic signature blocks — ESIGN Act compliant, no printing required.

Have your legal team review the completed documents before deployment.

Complete Your Compliance

Law-specific add-ons for this package

VA Consumer Rights Kit

Available

Virginia's CDPA gives consumers 5 distinct rights with a 45-day response window and a formal appeal process. When someone exercises a right, you need a documented intake, response, and — if you deny the appeal — an AG complaint referral notice. This kit covers the full lifecycle.

3 documents

$99

VA Profiling Assessment Workbook

Available

Virginia requires data protection assessments specifically structured around statutory weighing factors — benefits vs. risks, de-identified alternatives, consumer expectations, and the controller-consumer relationship. This workbook implements those exact factors.

3 documents

$109

VA Controller-Processor Kit

Available

Virginia's CDPA requires specific contractual terms between controllers and processors — confidentiality, data return/deletion, compliance demonstration, audit rights, and subcontractor flow-down. This kit provides the contract templates and audit questionnaire.

3 documents

$89

Statutory Authority

Citation: Va. Code §§ 59.1-575 through 59.1-584

View official source(opens in new tab)

Complete Package

$249

One-time purchase. Instant download.

  • 6 customized documents
  • Instant digital download
  • Based on Va. Code §§ 59.1-575 through 59.1-584
  • Secure checkout via Stripe

Purchase now, customize your documents after checkout

vs. thousands at a law firm

Verified against enacted statute text

Source: Va. Code §§ 59.1-575 through 59.1-584

Questions before purchasing? Email us

Plain-Language Guide

Read our plain-language guide to this law →

Virginia CDPA: Data Protection Assessment Requirements

Customize Your Virginia CDPA Package

Fill in your company details below. Your answers will be used to pre-fill your compliance documents.

Virginia CDPA6 documents$249
Step 1 of 520%

Step 1 of 5

Company Information