Free scan
Virginia — VCDPA

Virginia VCDPA and website tracking

Virginia enacted the first comprehensive US state privacy law after California, with opt-out rights for targeted advertising.

Comprehensive consumer-privacy law
Statute type
AG-enforced
Who enforces

The Virginia Consumer Data Protection Act (VCDPA) took effect January 1, 2023 and was the first comprehensive US state privacy law to follow California. It gives consumers rights to access, correct, delete, and opt out of the sale of personal data and of targeted advertising and certain profiling.

For website owners, VCDPA reinforces the same pattern spreading across states: give consumers a clear way to opt out, honor it, and keep privacy disclosures accurate about the trackers you run.

Penalties & enforcement

Enforced by the Virginia Attorney General, with civil penalties per violation after a cure period. No private right of action.

What this means for your site

Whatever the statute, the underlying test is practical: do third-party trackers collect or transmit visitor data before the visitor consents? RegSentry runs a real browser against your site and shows you exactly that — which scripts fire, when, and whether a consent banner actually held them back.

See what fires on your site before consent — free, 30 seconds, no signup.

Real browser scan, no signup to run it. You see a summary of the findings; the full report with every tracker unlocks with your email.

Related

California — CIPACalifornia — CCPA/CPRAPennsylvania — WESCAFlorida — FSCAWashington — My Health My Data Exposure calculator
Monitor my site ($99/mo) Get the 2026 checklist