This page covers enacted statutes as of June 2026. Not legal advice. † Section numbers marked with † should be verified against current codified statutes before legal reliance. For a plain-English compliance answer, use the Compliance Checker at DiscloseAI.net.
Legal Background
The Virginia Consumer Data Protection Act (VCDPA, Va. Code Ann. § 59.1-575 et seq.) grants consumers rights related to automated processing producing legal or similarly significant effects.
Applicable Statutes
VCDPA – Automated Decision-Making
Grants consumers the right to opt out of profiling for decisions producing legal or significant effects, and to obtain information about automated processing logic.
Citation: Va. Code Ann. § 59.1-578
AI in Elections – Synthetic Media Disclosure
Virginia law addresses the use of synthetic media in election advertising.
Citation: Va. Code Ann. § 24.2-1058 †
Small Business Obligations
- If processing Virginia residents' data for significant automated decisions, comply with VCDPA opt-out and transparency requirements
- Provide data protection assessments for high-risk automated processing activities
- Disclose AI-generated synthetic media in election-related content