VirginiaConsumer Data Protection Act; user-generated content protected, civil penalty.
What it does
Consumer Data Protection Act; user-generated content protected; civil penalty. Requires controllers and processors to provide consumers with a privacy notice that applies to the consumers' user-generated content, defined in the bill, under the Consumer Data Protection Act and requires that any secondary use, defined in the bill, of personal data or user-generated content be consented to by the consumer. The bill requires a controller or processor, upon request by a consumer, to provide such consumer with a report that describes how the consumer's personal data or user-generated content was processed over the prior 12 months.
More detail
The bill increases from $7,500 to $15,000 the maximum civil penalties for violations and allows civil penalties of up to $22,500 per violation for repeated noncompliance or egregious violations. The bill also allows a consumer who suffers a loss due to a violation to bring a private right of action against a controller or processor.
Where do you stand?
Choose your position
Tell your reps
Take a position to see your representatives and ways to contact them.
Where it stands
- Introduced
- Passed House
- Passed Senate
- To Governor
- Became Law
Looking ahead
No hearings or votes scheduled.
History
- 2025
- Feb 4Left in Communications, Technology and InnovationLatest
- Jan 27Subcommittee recommends laying on the table (10-Y 0-N)
- Vote recorded Subcommittee recommends laying on the table (10-Y 0-N). Result: pass.Lower
- Jan 23Assigned CT & I sub: CommunicationsMinor
- Jan 15Fiscal Impact Statement from Department of Planning and Budget (HB2043)
- Jan 7Referred to Committee on Communications, Technology and InnovationMinor
- Jan 7Prefiled and ordered printed; Offered 01-13-2025 25102628DIntroduced