{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/2.2-3800.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/2.2-3800.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/2.2-3800.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/2.2-3800.html"}],"law_id":69409,"edition_id":1,"section_id":69409,"structure_id":13559,"section_number":"2.2-3800","catch_line":"Short title; findings; principles of information practice","history":"1976, c. 597, \u00a7\u00a7 2.1-377, 2.1-378; 1987, c. 506; 2001, c. 844; 2003, cc. 791, 914, 918, 927; 2009, cc. 849, 867; 2018, cc. 597, 679.","full_text":"A\n\nThis chapter may be cited as the “Government Data Collection and Dissemination Practices Act.”B\n\nThe General Assembly finds that:1\n\nAn individual’s privacy is directly affected by the extensive collection, maintenance, use and dissemination of personal information;2\n\nThe increasing use of computers and sophisticated information technology has greatly magnified the harm that can occur from these practices;3\n\nAn individual’s opportunities to secure employment, insurance, credit, and his right to due process, and other legal protections are endangered by the misuse of certain of these personal information systems; and4\n\nIn order to preserve the rights guaranteed a citizen in a free society, legislation is necessary to establish procedures to govern information systems containing records on individuals.C\n\nRecordkeeping agencies of the Commonwealth and political subdivisions shall adhere to the following principles of information practice to ensure safeguards for personal privacy:1\n\nThere shall be no personal information system whose existence is secret.2\n\nInformation shall not be collected unless the need for it has been clearly established in advance.3\n\nInformation shall be appropriate and relevant to the purpose for which it has been collected.4\n\nInformation shall not be obtained by fraudulent or unfair means.5\n\nInformation shall not be used unless it is accurate and current.6\n\nThere shall be a prescribed procedure for an individual to learn the purpose for which information has been recorded and particulars about its use and dissemination.7\n\nThere shall be a clearly prescribed and uncomplicated procedure for an individual to correct, erase or amend inaccurate, obsolete or irrelevant information.8\n\nAny agency holding personal information shall assure its reliability and take precautions to prevent its misuse.9\n\nThere shall be a clearly prescribed procedure to prevent personal information collected for one purpose from being used or disseminated for another purpose unless such use or dissemination is authorized or required by law.10\n\nThe Commonwealth or any agency or political subdivision thereof shall not collect personal information except as explicitly or implicitly authorized by law.","order_by":null,"text":{"0":{"id":251027,"text":"This chapter may be cited as the “Government Data Collection and Dissemination Practices Act.”","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"B"},"1":{"id":251028,"text":"The General Assembly finds that:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A","next_prefix":"B1"},"2":{"id":251029,"text":"An individual’s privacy is directly affected by the extensive collection, maintenance, use and dissemination of personal information;","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"3":{"id":251030,"text":"The increasing use of computers and sophisticated information technology has greatly magnified the harm that can occur from these practices;","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"4":{"id":251031,"text":"An individual’s opportunities to secure employment, insurance, credit, and his right to due process, and other legal protections are endangered by the misuse of certain of these personal information systems; and","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2","next_prefix":"B4"},"5":{"id":251032,"text":"In order to preserve the rights guaranteed a citizen in a free society, legislation is necessary to establish procedures to govern information systems containing records on individuals.","type":"section","prefixes":["B","4"],"prefix":"4","entire_prefix":"B4","prefix_anchor":"B4","level":2,"prior_prefix":"B3","next_prefix":"C"},"6":{"id":251033,"text":"Recordkeeping agencies of the Commonwealth and political subdivisions shall adhere to the following principles of information practice to ensure safeguards for personal privacy:","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B4","next_prefix":"C1"},"7":{"id":251034,"text":"There shall be no personal information system whose existence is secret.","type":"section","prefixes":["C","1"],"prefix":"1","entire_prefix":"C1","prefix_anchor":"C1","level":2,"prior_prefix":"C","next_prefix":"C2"},"8":{"id":251035,"text":"Information shall not be collected unless the need for it has been clearly established in advance.","type":"section","prefixes":["C","2"],"prefix":"2","entire_prefix":"C2","prefix_anchor":"C2","level":2,"prior_prefix":"C1","next_prefix":"C3"},"9":{"id":251036,"text":"Information shall be appropriate and relevant to the purpose for which it has been collected.","type":"section","prefixes":["C","3"],"prefix":"3","entire_prefix":"C3","prefix_anchor":"C3","level":2,"prior_prefix":"C2","next_prefix":"C4"},"10":{"id":251037,"text":"Information shall not be obtained by fraudulent or unfair means.","type":"section","prefixes":["C","4"],"prefix":"4","entire_prefix":"C4","prefix_anchor":"C4","level":2,"prior_prefix":"C3","next_prefix":"C5"},"11":{"id":251038,"text":"Information shall not be used unless it is accurate and current.","type":"section","prefixes":["C","5"],"prefix":"5","entire_prefix":"C5","prefix_anchor":"C5","level":2,"prior_prefix":"C4","next_prefix":"C6"},"12":{"id":251039,"text":"There shall be a prescribed procedure for an individual to learn the purpose for which information has been recorded and particulars about its use and dissemination.","type":"section","prefixes":["C","6"],"prefix":"6","entire_prefix":"C6","prefix_anchor":"C6","level":2,"prior_prefix":"C5","next_prefix":"C7"},"13":{"id":251040,"text":"There shall be a clearly prescribed and uncomplicated procedure for an individual to correct, erase or amend inaccurate, obsolete or irrelevant information.","type":"section","prefixes":["C","7"],"prefix":"7","entire_prefix":"C7","prefix_anchor":"C7","level":2,"prior_prefix":"C6","next_prefix":"C8"},"14":{"id":251041,"text":"Any agency holding personal information shall assure its reliability and take precautions to prevent its misuse.","type":"section","prefixes":["C","8"],"prefix":"8","entire_prefix":"C8","prefix_anchor":"C8","level":2,"prior_prefix":"C7","next_prefix":"C9"},"15":{"id":251042,"text":"There shall be a clearly prescribed procedure to prevent personal information collected for one purpose from being used or disseminated for another purpose unless such use or dissemination is authorized or required by law.","type":"section","prefixes":["C","9"],"prefix":"9","entire_prefix":"C9","prefix_anchor":"C9","level":2,"prior_prefix":"C8","next_prefix":"C10"},"16":{"id":251043,"text":"The Commonwealth or any agency or political subdivision thereof shall not collect personal information except as explicitly or implicitly authorized by law.","type":"section","prefixes":["C","10"],"prefix":"10","entire_prefix":"C10","prefix_anchor":"C10","level":2,"prior_prefix":"C9"}},"ancestry":[{"id":13559,"edition_id":1,"name":"Government Data Collection and Dissemination Practices Act","identifier":"38","label":"chapter","depth":4,"order_by":1,"parent_id":12751,"metadata":{},"date_created":"2026-06-26 03:45:14","date_modified":"2026-06-26 03:45:14","permalink":{"id":176597,"object_type":"structure","relational_id":13559,"identifier":"38","token":"2.2\/II\/B\/38","url":"\/2.2\/II\/B\/38\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12751,"edition_id":1,"name":"Transaction of Public Business","identifier":"B","label":"part","depth":3,"order_by":1,"parent_id":12750,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":176445,"object_type":"structure","relational_id":12751,"identifier":"B","token":"2.2\/II\/B","url":"\/2.2\/II\/B\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12750,"edition_id":1,"name":"Administration of State Government","identifier":"II","label":"subtitle","depth":2,"order_by":1,"parent_id":12749,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":176253,"object_type":"structure","relational_id":12750,"identifier":"II","token":"2.2\/II","url":"\/2.2\/II\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12749,"edition_id":1,"name":"Administration of Government","identifier":"2.2","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":171453,"object_type":"structure","relational_id":12749,"identifier":"2.2","token":"2.2","url":"\/2.2\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":69409,"structure_id":13559,"section_number":"2.2-3800","catch_line":"Short title; findings; principles of information practice","url":"\/2.2-3800\/","token":"2.2\/II\/B\/38\/2.2-3800","metadata":false},{"id":54522,"structure_id":13559,"section_number":"2.2-3801","catch_line":"Definitions","url":"\/2.2-3801\/","token":"2.2\/II\/B\/38\/2.2-3801","metadata":false},{"id":62575,"structure_id":13559,"section_number":"2.2-3802","catch_line":"Systems to which chapter inapplicable","url":"\/2.2-3802\/","token":"2.2\/II\/B\/38\/2.2-3802","metadata":false},{"id":58950,"structure_id":13559,"section_number":"2.2-3803","catch_line":"Administration of systems including personal information; Internet privacy policy; exceptions","url":"\/2.2-3803\/","token":"2.2\/II\/B\/38\/2.2-3803","metadata":false},{"id":55705,"structure_id":13559,"section_number":"2.2-3804","catch_line":"Military recruiters to have access to student information, school buildings, etc","url":"\/2.2-3804\/","token":"2.2\/II\/B\/38\/2.2-3804","metadata":false},{"id":59280,"structure_id":13559,"section_number":"2.2-3805","catch_line":"Dissemination of reports","url":"\/2.2-3805\/","token":"2.2\/II\/B\/38\/2.2-3805","metadata":false},{"id":58445,"structure_id":13559,"section_number":"2.2-3806","catch_line":"Rights of data subjects","url":"\/2.2-3806\/","token":"2.2\/II\/B\/38\/2.2-3806","metadata":false},{"id":69841,"structure_id":13559,"section_number":"2.2-3807","catch_line":"Agencies to report concerning systems operated or developed; publication of information","url":"\/2.2-3807\/","token":"2.2\/II\/B\/38\/2.2-3807","metadata":false},{"id":86548,"structure_id":13559,"section_number":"2.2-3808","catch_line":"Collection, disclosure, or display of social security number; personal identifying information of donors; penalty","url":"\/2.2-3808\/","token":"2.2\/II\/B\/38\/2.2-3808","metadata":false},{"id":62639,"structure_id":13559,"section_number":"2.2-3808.1","catch_line":"Agencies' disclosure of certain account information prohibited","url":"\/2.2-3808.1\/","token":"2.2\/II\/B\/38\/2.2-3808.1","metadata":false},{"id":71106,"structure_id":13559,"section_number":"2.2-3808.2","catch_line":"Repealed","url":"\/2.2-3808.2\/","token":"2.2\/II\/B\/38\/2.2-3808.2","metadata":false},{"id":80323,"structure_id":13559,"section_number":"2.2-3809","catch_line":"Injunctive relief; civil penalty; attorneys' fees","url":"\/2.2-3809\/","token":"2.2\/II\/B\/38\/2.2-3809","metadata":false}],"next_section":{"id":54522,"structure_id":13559,"section_number":"2.2-3801","catch_line":"Definitions","url":"\/2.2-3801\/","token":"2.2\/II\/B\/38\/2.2-3801","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/2.2-3800\/","history_text":"

This law was first created in 1976. The record of its establishment is cataloged in chapter 597 of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year. Unfortunately, the 1976 \u201cActs\u201d aren\u2019t available online. It has been modified 5 times. Those modifications are cataloged by \u201cThe Acts of Assembly,\u201d a state publication, by year and chapter. Those modifications that can be read on the General Assembly\u2019s website will be linked accordingly. Those modifications are as follows: in 1987, chapter 506; in 2001, chapter 844<\/a>; in 2003, chapters 791<\/a>, 914<\/a>, 918<\/a>, and 927<\/a>; in 2009, chapters 849<\/a> and 867<\/a>; in 2018, chapters 597<\/a> and 679<\/a>.<\/p>","references":[{"id":72168,"section_number":"16.1-77","catch_line":"Civil jurisdiction of general district courts; amending amount of claim","order_by":null,"url":"\/16.1-77\/"},{"id":81693,"section_number":"18.2-265.13","catch_line":"Confidentiality of data in possession of Department","order_by":null,"url":"\/18.2-265.13\/"},{"id":56476,"section_number":"2.2-203.2:4","catch_line":"Chief Data Officer; created; report","order_by":null,"url":"\/2.2-203.2_4\/"},{"id":71205,"section_number":"2.2-2034.1","catch_line":"Office of Data Governance and Analytics created","order_by":null,"url":"\/2.2-2034.1\/"},{"id":68718,"section_number":"2.2-2477","catch_line":"Virginia Career Readiness Certificate Program","order_by":null,"url":"\/2.2-2477\/"},{"id":72874,"section_number":"2.2-3705.1","catch_line":"Exclusions to application of chapter; exclusions of general application to public bodies","order_by":null,"url":"\/2.2-3705.1\/"},{"id":87153,"section_number":"2.2-5514","catch_line":"Prohibited products and services and required incident reporting","order_by":null,"url":"\/2.2-5514\/"},{"id":55436,"section_number":"22.1-295.1","catch_line":"Employee personnel files; maintenance of employee records; confidentiality of certain records","order_by":null,"url":"\/22.1-295.1\/"},{"id":83396,"section_number":"23.1-203","catch_line":"Duties of Council","order_by":null,"url":"\/23.1-203\/"},{"id":72876,"section_number":"23.1-204.1","catch_line":"Postgraduation employment rates","order_by":null,"url":"\/23.1-204.1\/"},{"id":84829,"section_number":"32.1-276.5","catch_line":"Providers to submit data; civil penalty","order_by":null,"url":"\/32.1-276.5\/"},{"id":73899,"section_number":"32.1-320","catch_line":"Duties of Attorney General; medical services providers audit and investigation unit","order_by":null,"url":"\/32.1-320\/"},{"id":54759,"section_number":"33.2-503","catch_line":"HOT lanes enforcement","order_by":null,"url":"\/33.2-503\/"},{"id":75463,"section_number":"45.2-2105","catch_line":" Establishment of the Consortium","order_by":null,"url":"\/45.2-2105\/"},{"id":65399,"section_number":"46.2-216.1","catch_line":"Electronic filings or submissions to Department; provision of electronic documents by Department","order_by":null,"url":"\/46.2-216.1\/"},{"id":67491,"section_number":"46.2-340","catch_line":"Information concerning school bus drivers and driver education instructors","order_by":null,"url":"\/46.2-340\/"},{"id":60928,"section_number":"46.2-373","catch_line":"Report by law-enforcement official investigating accident","order_by":null,"url":"\/46.2-373\/"},{"id":54310,"section_number":"46.2-819.1","catch_line":"Installation and use of photo-monitoring system or automatic vehicle identification system in conjunction with electronic or manual toll facilities; penalty","order_by":null,"url":"\/46.2-819.1\/"},{"id":54468,"section_number":"46.2-819.3:1","catch_line":"Installation and use of video-monitoring system and automatic vehicle identification system in conjunction with all-electronic toll facilities; penalty","order_by":null,"url":"\/46.2-819.3_1\/"},{"id":67197,"section_number":"46.2-819.5","catch_line":"Enforcement through use of photo-monitoring system or automatic vehicle identification system in conjunction with usage of Dulles Access Highway","order_by":null,"url":"\/46.2-819.5\/"},{"id":84698,"section_number":"52-48","catch_line":"Confidentiality and immunity from service of process; penalties","order_by":null,"url":"\/52-48\/"},{"id":77504,"section_number":"54.1-2324","catch_line":"Financial report and report of independent certified public accountant required for perpetual care trust funds","order_by":null,"url":"\/54.1-2324\/"},{"id":58614,"section_number":"54.1-2333","catch_line":"Financial report and report of independent certified public accountant required for preneed trust accounts","order_by":null,"url":"\/54.1-2333\/"},{"id":82587,"section_number":"58.1-3122.2","catch_line":"Remote access to nonconfidential public records maintained by commissioner","order_by":null,"url":"\/58.1-3122.2\/"},{"id":72967,"section_number":"58.1-3172.1","catch_line":"Remote access to nonconfidential public records maintained by treasurer; fees","order_by":null,"url":"\/58.1-3172.1\/"},{"id":68267,"section_number":"63.2-103","catch_line":"Confidential records and information concerning child support enforcement","order_by":null,"url":"\/63.2-103\/"}],"refers_to":false,"permalink":{"id":176599,"object_type":"law","relational_id":69409,"identifier":"2.2-3800","token":"2.2\/II\/B\/38\/2.2-3800","url":"\/2.2-3800\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/2.2-3800\/","token":"2.2\/II\/B\/38\/2.2-3800","dublin_core":{"Title":"Short title; findings; principles of information practice","Type":"Text","Format":"text\/html","Identifier":"\u00a7 2.2-3800","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

A.<\/span> This chapter may be cited as the “Government Data Collection and Dissemination Practices Act.” <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

B.<\/span> The General Assembly finds that: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> An individual’s privacy is directly affected by the extensive collection, maintenance, use and dissemination of personal information<\/span>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> The increasing use of computers and sophisticated information technology has greatly magnified the harm that can occur from these practices; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> An individual’s opportunities to secure employment, insurance, credit, and his right to due process<\/span>, and other legal protections are endangered by the misuse of certain of these personal information<\/span> systems; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

4.<\/span> In order<\/span> to preserve the rights guaranteed a citizen in a free society, legislation is necessary to establish procedures to govern information systems<\/span> containing records on individuals. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

C.<\/span> Recordkeeping agencies of the Commonwealth and political subdivisions shall adhere to the following principles of information practice to ensure safeguards for personal privacy: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> There shall be no personal information<\/span> system whose existence is secret. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Information shall not be collected unless the need for it has been clearly established in advance. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> Information shall be appropriate and relevant to the purpose for which it has been collected. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

4.<\/span> Information shall not be obtained by fraudulent or unfair means. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

5.<\/span> Information shall not be used unless it is accurate and current. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

6.<\/span> There shall be a prescribed procedure for an individual to learn the purpose for which information has been recorded and particulars about its use and dissemination. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

7.<\/span> There shall be a clearly prescribed and uncomplicated procedure for an individual to correct, erase or amend<\/span> inaccurate, obsolete or irrelevant information. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

8.<\/span> Any agency<\/span> holding personal information<\/span> shall assure its reliability and take precautions to prevent its misuse. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

9.<\/span> There shall be a clearly prescribed procedure to prevent personal information<\/span> collected for one purpose from being used or disseminated for another purpose unless such use or dissemination is authorized or required by law<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

10.<\/span> The Commonwealth or any agency<\/span> or political subdivision thereof shall not collect personal information<\/span> except as explicitly or implicitly authorized by law<\/span>. <\/i><\/a><\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nSHORT TITLE; FINDINGS; PRINCIPLES OF INFORMATION PRACTICE (\u00a7 2.2-3800)\n\nA. This chapter may be cited as the “Government Data Collection and\nDissemination Practices Act.”\n\nB. The General Assembly finds that:\n\n 1. An individual’s privacy is directly affected by the extensive\n collection, maintenance, use and dissemination of personal information;\n\n 2. The increasing use of computers and sophisticated information technology\n has greatly magnified the harm that can occur from these practices;\n\n 3. An individual’s opportunities to secure employment, insurance,\n credit, and his right to due process, and other legal protections are\n endangered by the misuse of certain of these personal information systems; and\n\n 4. In order to preserve the rights guaranteed a citizen in a free society,\n legislation is necessary to establish procedures to govern information systems\n containing records on individuals.\n\nC. Recordkeeping agencies of the Commonwealth and political subdivisions shall\nadhere to the following principles of information practice to ensure safeguards\nfor personal privacy:\n\n 1. There shall be no personal information system whose existence is secret.\n\n 2. Information shall not be collected unless the need for it has been clearly\n established in advance.\n\n 3. Information shall be appropriate and relevant to the purpose for which it\n has been collected.\n\n 4. Information shall not be obtained by fraudulent or unfair means.\n\n 5. Information shall not be used unless it is accurate and current.\n\n 6. There shall be a prescribed procedure for an individual to learn the\n purpose for which information has been recorded and particulars about its use\n and dissemination.\n\n 7. There shall be a clearly prescribed and uncomplicated procedure for an\n individual to correct, erase or amend inaccurate, obsolete or irrelevant\n information.\n\n 8. Any agency holding personal information shall assure its reliability and\n take precautions to prevent its misuse.\n\n 9. There shall be a clearly prescribed procedure to prevent personal\n information collected for one purpose from being used or disseminated for\n another purpose unless such use or dissemination is authorized or required by\n law.\n\n 10. The Commonwealth or any agency or political subdivision thereof shall not\n collect personal information except as explicitly or implicitly authorized by\n law.\n\nHISTORY: 1976, c. 597, \u00a7\u00a7 2.1-377, 2.1-378; 1987, c. 506; 2001, c. 844; 2003,\ncc. 791, 914, 918, 927; 2009, cc. 849, 867; 2018, cc. 597, 679.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}