{
  "node_id": "us-virginia-cdpa-consumer-data-protection-2021",
  "title": "Virginia Consumer Data Protection Act (CDPA)",
  "domain": "Data Protection & Privacy",
  "version": "1.0.0",
  "last_updated": "2026-04-18",
  "bluf": "The Virginia Consumer Data Protection Act (CDPA) establishes a framework for controlling and processing personal data in the Commonwealth. It applies to entities that conduct business in Virginia or produce products/services targeted to Virginia residents and either (i) control or process personal data of at least 25,000 consumers or (ii) derive over 50% of gross revenue from the sale of personal data and control or process data of at least 25,000 consumers, granting consumers specific rights and requiring controllers to conduct data protection assessments for high-risk activities per § 59.1-576.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "california-ccpa-v2",
    "gdpr-article-35-dpia",
    "gdpr-article-5-data-principles"
  ],
  "primary_citations_count": 7
}