Data Privacy · Virginia
Virginia Consumer Data Protection Act
SB 1392 - enacted in Virginia.
- Status
- Enacted
- Enacted
- 2021
- States with data privacy laws
- 21
- Virginia tracker score
- 59/100 Top quartile
The bottom line
Virginia Consumer Data Protection Act is an enacted law in Virginia, part of a mature, broadly-adopted data privacy landscape.
- Enacted
- effective 2023-01-01
- 21
- states have data privacy laws
- 21/21
- data privacy laws enacted nationally
- 59/100
- Virginia tracker score
Data compiled 2026-03-18 from the official Virginia legislative record linked below; laws can be amended or repealed after this date.
Category catalog share · regulations
How 21 tracked data privacy records split by state
Exclusive Virginia vs other-state counts in this category (sum to the category total). Orthogonal to the peer scatter below, which plots enacted volume against portal tracker score.
Regulatory Snapshot: Virginia Consumer Data Protection Act
Virginia Consumer Data Protection Act (SB 1392) is an enacted law in Virginia under the Data Privacy category. It was enacted on 2021-03-02 and becomes effective on 2023-01-01. Virginia currently has 4 regulations tracked here, with 4 records marked enacted in this dataset. PlainRegWatch's tracker score is 59/100; it summarizes coverage within the five categories this site tracks and is not an official state rating. PlainRegWatch compiled this entry's data on 2026-03-18; consult the linked official source for the current, authoritative text.
Nationally, 21 data privacy statutes have been enacted and 0 additional bills remain pending - 21 distinct jurisdictions have codified rules in this area so far. That places Virginia within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in SB 1392 itself.
Applicability under Virginia Consumer Data Protection Act: 100K+ VA consumers data, or 25K+ with 50%+ revenue from data sales. Penalty exposure is documented as: Up to $7,500/violation. AG exclusive enforcement. No private right of action. Notable exemptions: State agencies, HIPAA, GLBA, nonprofits, higher education..
Summary
Second comprehensive state privacy law. Consumer rights to access, correct, delete, and opt out.
Key Requirements
- Access, correction, deletion, portability, opt-out of targeted ads/sale/profiling.
- Data protection assessments.
- Clear privacy notice.
Penalties
- Up to $7,500/violation.
- AG exclusive enforcement.
- No private right of action.
Applicability
- 100K+ VA consumers data, or 25K+ with 50%+ revenue from data sales.
Exemptions
- State agencies, HIPAA, GLBA, nonprofits, higher education.
Official Source
https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/Category context
How Virginia sits among data privacy peers
21 states have a tracked record in data privacy ; Virginia ranks #8 by portal tracker score among those peers. Each point is one state with at least one data privacy regulation in this archive.
Read the peer-state figures
- California: 1 enacted of 1 tracked data privacy record, tracker score 100/100.
- Colorado: 1 enacted of 1 tracked data privacy record, tracker score 76/100.
- Texas: 1 enacted of 1 tracked data privacy record, tracker score 69/100.
- Connecticut: 1 enacted of 1 tracked data privacy record, tracker score 62/100.
- Minnesota: 1 enacted of 1 tracked data privacy record, tracker score 62/100.
- Oregon: 1 enacted of 1 tracked data privacy record, tracker score 62/100.
- Delaware: 1 enacted of 1 tracked data privacy record, tracker score 59/100.
- Virginia (this state): 1 enacted of 1 tracked data privacy record, tracker score 59/100.
- Utah: 1 enacted of 1 tracked data privacy record, tracker score 55/100.
- Florida: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
- Maryland: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
- New Jersey: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
- Rhode Island: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
- Vermont: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
- Indiana: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- Iowa: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- Kentucky: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- Montana: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- Nebraska: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- New Hampshire: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
- Tennessee: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
Dashed lines mark the peer averages in this category. The tracker score summarizes enacted records across all five policy areas PlainRegWatch tracks; it is not enforcement strength or legal burden. Read how tracker scores are computed.
Tracker-score ranking on data privacy
Top peer states by portal tracker score among jurisdictions with a data privacy record in this archive.
| # | State | Tracker score |
|---|---|---|
| 1 | California | 100 |
| 2 | Colorado | 76 |
| 3 | Texas | 69 |
| 4 | Connecticut | 62 |
| 5 | Minnesota | 62 |
| 6 | Oregon | 62 |
| 7 | Delaware | 59 |
| 8 | Virginia (this state) | 59 |
| 9 | Utah | 55 |
| 10 | Florida | 48 |
Read with Virginia Consumer Data Protection
Nearest data privacy volume peers and same-state archive siblings for this ENACTED · DENSE row.
ENACTED DENSE
Delaware · 1 enacted
Delaware holds 1 enacted data privacy rows (more by 0 than Virginia); tracker 59/100.
Connecticut · 1 enacted
Connecticut holds 1 enacted data privacy rows (more by 0 than Virginia); tracker 62/100.
Minnesota · 1 enacted
Minnesota holds 1 enacted data privacy rows (more by 0 than Virginia); tracker 62/100.
Oregon · 1 enacted
Oregon holds 1 enacted data privacy rows (more by 0 than Virginia); tracker 62/100.
Virginia Minimum Wage Act · ENACTED
Another Virginia archive row (Employment & Worker Protection) stamped ENACTED beside ENACTED Virginia Consumer Data Prot….
Virginia Non-Compete Ban for Low-Wage Workers · ENACTED
Another Virginia archive row (Employment & Worker Protection) stamped ENACTED beside ENACTED Virginia Consumer Data Prot….
Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since this data was compiled (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.