What is the CDPA?
CDPA stands for Virginia’s Consumer Data Protection Act.
The CDPA provides consumers with six main rights.
Right of access : the right to confirm whether a controller is processing personal data concerning the consumer and to access the consumer’s personal data.
Right to correction: the right to correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of processing the consumer’s personal data.
Right to delete: the right to delete personal data concerning the consumer.
Right to data portability: the right to obtain personal data in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another entity without hindrance.
Right to appeal: a business must respond to a consumer request within 45 days of receipt. It may extend that deadline once and after notification by an additional 45 days when reasonably necessary. The consumer has the right to appeal a business’ denial to take action within a reasonable time period.
Right to opt out: The right to opt-out of the processing of personal data for
- purposes of targeted advertising;
- the sale of personal data; and
- profiling in advancing decisions that produce legal or similarly significant effects concerning the consumer.
The “sale of personal information” is defined as “the exchange of personal data for monetary consideration by the controller to a third party.”
