QuestionQ147

State Privacy Laws

Under which circumstances is the processing of personal data subject to the Virginia Consumer Data Protection Act (VCDPA) requirement to document a data protection assessment?

  • A If the data subject is younger than 13 years of age and the data is processed after January 1, 2023.
  • B If the data processor processes personal data beyond the controller's instructions.
  • C If the personal data is stored by a California-based third-party service provider.
  • D If the personal data is processed for purposes of targeted advertising.
Explanation

A VCDPA-covered controller must conduct and document a data protection assessment when it processes personal data for targeted advertising. This activity is expressly listed in Virginia Code § 59.1-580 among the processing activities requiring an assessment.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!