{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/59.1-577.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/59.1-577.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/59.1-577.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/59.1-577.html"}],"law_id":83673,"edition_id":1,"section_id":83673,"structure_id":14234,"section_number":"59.1-577","catch_line":"Personal data rights; consumers","history":"2021, Sp. Sess. I, cc. 35, 36; 2022, c. 423.","full_text":"A\n\nA consumer may invoke the consumer rights authorized pursuant to this subsection at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child’s parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:1\n\nTo confirm whether or not a controller is processing the consumer’s personal data and to access such personal data;2\n\nTo correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer’s personal data;3\n\nTo delete personal data provided by or obtained about the consumer;4\n\nTo obtain a copy of the consumer’s personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and5\n\nTo opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.B\n\nExcept as otherwise provided in this chapter, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to subsection A as follows:1\n\nA controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in subsection A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer’s requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.2\n\nIf a controller declines to take action regarding the consumer’s request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to subsection C.3\n\nInformation provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.4\n\nIf a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer’s request.5\n\nA controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer’s request to delete such data pursuant to subdivision A 3 by either (i) retaining a record of the deletion request and the minimum data necessary for the purpose of ensuring the consumer’s personal data remains deleted from the business’s records and not using such retained data for any other purpose pursuant to the provisions of this chapter or (ii) opting the consumer out of the processing of such personal data for any purpose except for those exempted pursuant to the provisions of this chapter.C\n\nA controller shall establish a process for a consumer to appeal the controller’s refusal to take action on a request within a reasonable period of time after the consumer’s receipt of the decision pursuant to subdivision B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to subsection A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.","order_by":null,"text":{"0":{"id":299904,"text":"A consumer may invoke the consumer rights authorized pursuant to this subsection at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child’s parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"A1"},"1":{"id":299905,"text":"To confirm whether or not a controller is processing the consumer’s personal data and to access such personal data;","type":"section","prefixes":["A","1"],"prefix":"1","entire_prefix":"A1","prefix_anchor":"A1","level":2,"prior_prefix":"A","next_prefix":"A2"},"2":{"id":299906,"text":"To correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer’s personal data;","type":"section","prefixes":["A","2"],"prefix":"2","entire_prefix":"A2","prefix_anchor":"A2","level":2,"prior_prefix":"A1","next_prefix":"A3"},"3":{"id":299907,"text":"To delete personal data provided by or obtained about the consumer;","type":"section","prefixes":["A","3"],"prefix":"3","entire_prefix":"A3","prefix_anchor":"A3","level":2,"prior_prefix":"A2","next_prefix":"A4"},"4":{"id":299908,"text":"To obtain a copy of the consumer’s personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and","type":"section","prefixes":["A","4"],"prefix":"4","entire_prefix":"A4","prefix_anchor":"A4","level":2,"prior_prefix":"A3","next_prefix":"A5"},"5":{"id":299909,"text":"To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.","type":"section","prefixes":["A","5"],"prefix":"5","entire_prefix":"A5","prefix_anchor":"A5","level":2,"prior_prefix":"A4","next_prefix":"B"},"6":{"id":299910,"text":"Except as otherwise provided in this chapter, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to subsection A as follows:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A5","next_prefix":"B1"},"7":{"id":299911,"text":"A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in subsection A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer’s requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"8":{"id":299912,"text":"If a controller declines to take action regarding the consumer’s request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to subsection C.","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"9":{"id":299913,"text":"Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2","next_prefix":"B4"},"10":{"id":299914,"text":"If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer’s request.","type":"section","prefixes":["B","4"],"prefix":"4","entire_prefix":"B4","prefix_anchor":"B4","level":2,"prior_prefix":"B3","next_prefix":"B5"},"11":{"id":299915,"text":"A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer’s request to delete such data pursuant to subdivision A 3 by either (i) retaining a record of the deletion request and the minimum data necessary for the purpose of ensuring the consumer’s personal data remains deleted from the business’s records and not using such retained data for any other purpose pursuant to the provisions of this chapter or (ii) opting the consumer out of the processing of such personal data for any purpose except for those exempted pursuant to the provisions of this chapter.","type":"section","prefixes":["B","5"],"prefix":"5","entire_prefix":"B5","prefix_anchor":"B5","level":2,"prior_prefix":"B4","next_prefix":"C"},"12":{"id":299916,"text":"A controller shall establish a process for a consumer to appeal the controller’s refusal to take action on a request within a reasonable period of time after the consumer’s receipt of the decision pursuant to subdivision B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to subsection A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B5"}},"ancestry":[{"id":14234,"edition_id":1,"name":"Consumer Data Protection Act","identifier":"53","label":"chapter","depth":2,"order_by":1,"parent_id":12809,"metadata":{},"date_created":"2026-06-26 03:47:24","date_modified":"2026-06-26 03:47:24","permalink":{"id":262743,"object_type":"structure","relational_id":14234,"identifier":"53","token":"59.1\/53","url":"\/59.1\/53\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12809,"edition_id":1,"name":"Trade and Commerce","identifier":"59.1","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:54","date_modified":"2026-06-26 03:43:54","permalink":{"id":259521,"object_type":"structure","relational_id":12809,"identifier":"59.1","token":"59.1","url":"\/59.1\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":81398,"structure_id":14234,"section_number":"59.1-575","catch_line":"(Effective January 1, 2026) Definitions","url":"\/59.1-575\/","token":"59.1\/53\/59.1-575","metadata":false},{"id":63761,"structure_id":14234,"section_number":"59.1-576","catch_line":"Scope; exemptions","url":"\/59.1-576\/","token":"59.1\/53\/59.1-576","metadata":false},{"id":83673,"structure_id":14234,"section_number":"59.1-577","catch_line":"Personal data rights; consumers","url":"\/59.1-577\/","token":"59.1\/53\/59.1-577","metadata":false},{"id":57451,"structure_id":14234,"section_number":"59.1-577.1","catch_line":"(Effective January 1, 2026) Social media platforms; responsibilities and prohibitions related to minors","url":"\/59.1-577.1\/","token":"59.1\/53\/59.1-577.1","metadata":false},{"id":84222,"structure_id":14234,"section_number":"59.1-578","catch_line":"Data controller responsibilities; transparency","url":"\/59.1-578\/","token":"59.1\/53\/59.1-578","metadata":false},{"id":55458,"structure_id":14234,"section_number":"59.1-579","catch_line":"Responsibility according to role; controller and processor","url":"\/59.1-579\/","token":"59.1\/53\/59.1-579","metadata":false},{"id":60582,"structure_id":14234,"section_number":"59.1-580","catch_line":"Data protection assessments","url":"\/59.1-580\/","token":"59.1\/53\/59.1-580","metadata":false},{"id":83283,"structure_id":14234,"section_number":"59.1-581","catch_line":"Processing de-identified data; exemptions","url":"\/59.1-581\/","token":"59.1\/53\/59.1-581","metadata":false},{"id":83633,"structure_id":14234,"section_number":"59.1-582","catch_line":"Limitations","url":"\/59.1-582\/","token":"59.1\/53\/59.1-582","metadata":false},{"id":83422,"structure_id":14234,"section_number":"59.1-583","catch_line":"Investigative authority","url":"\/59.1-583\/","token":"59.1\/53\/59.1-583","metadata":false},{"id":71726,"structure_id":14234,"section_number":"59.1-584","catch_line":"Enforcement; civil penalty; expenses","url":"\/59.1-584\/","token":"59.1\/53\/59.1-584","metadata":false},{"id":80279,"structure_id":14234,"section_number":"59.1-585","catch_line":"Repealed","url":"\/59.1-585\/","token":"59.1\/53\/59.1-585","metadata":false}],"previous_section":{"id":63761,"structure_id":14234,"section_number":"59.1-576","catch_line":"Scope; exemptions","url":"\/59.1-576\/","token":"59.1\/53\/59.1-576","metadata":false},"next_section":{"id":57451,"structure_id":14234,"section_number":"59.1-577.1","catch_line":"(Effective January 1, 2026) Social media platforms; responsibilities and prohibitions related to minors","url":"\/59.1-577.1\/","token":"59.1\/53\/59.1-577.1","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/59.1-577\/","history_text":"

The record of this law\u2019s original creation isn\u2019t available online. It has been modified 1 time. Those modifications are cataloged by \u201cThe Acts of Assembly,\u201d a state publication, by year and chapter. Those modifications that can be read on the General Assembly\u2019s website will be linked accordingly. That modification is as follows: in 2022, chapter 423<\/a>.<\/p>","references":[{"id":81398,"section_number":"59.1-575","catch_line":"(Effective January 1, 2026) Definitions","order_by":null,"url":"\/59.1-575\/"},{"id":84222,"section_number":"59.1-578","catch_line":"Data controller responsibilities; transparency","order_by":null,"url":"\/59.1-578\/"},{"id":83283,"section_number":"59.1-581","catch_line":"Processing de-identified data; exemptions","order_by":null,"url":"\/59.1-581\/"}],"refers_to":false,"permalink":{"id":262753,"object_type":"law","relational_id":83673,"identifier":"59.1-577","token":"59.1\/53\/59.1-577","url":"\/59.1-577\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/59.1-577\/","token":"59.1\/53\/59.1-577","dublin_core":{"Title":"Personal data rights; consumers","Type":"Text","Format":"text\/html","Identifier":"\u00a7 59.1-577","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

A.<\/span> A consumer<\/span> may invoke the consumer<\/span> rights authorized pursuant to this subsection at any time by submitting a request to a controller<\/span> specifying the consumer<\/span> rights the consumer<\/span> wishes to invoke. A known child<\/span>’s parent<\/span> or legal guardian may invoke such consumer<\/span> rights on behalf of the child<\/span> regarding processing<\/span> personal data<\/span> belonging to the known child<\/span>. A controller<\/span> shall comply with an authenticated consumer<\/span> request to exercise the right: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> To confirm whether or not a controller<\/span> is processing<\/span> the consumer<\/span>’s personal data<\/span> and to access such personal data<\/span>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> To correct inaccuracies in the consumer<\/span>’s personal data<\/span>, taking into account the nature of the personal data<\/span> and the purposes of the processing<\/span> of the consumer<\/span>’s personal data<\/span>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> To delete personal data<\/span> provided by or obtained about the consumer<\/span>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

4.<\/span> To obtain a copy of the consumer<\/span>’s personal data<\/span> that the consumer<\/span> previously provided to the controller<\/span> in a portable and, to the extent technically feasible, readily usable format that allows the consumer<\/span> to transmit the data to another controller<\/span> without hindrance, where the processing<\/span> is carried out by automated means; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

5.<\/span> To opt out of the processing<\/span> of the personal data for purposes of (i) targeted advertising<\/span>, (ii) the sale of personal data<\/span>, or (iii) profiling<\/span> in furtherance of decisions that produce legal or similarly significant effects concerning the consumer<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

B.<\/span> Except as otherwise provided in this chapter, a controller<\/span> shall comply with a request by a consumer<\/span> to exercise the consumer<\/span> rights authorized pursuant to subsection A as follows: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> A controller<\/span> shall respond to the consumer<\/span> without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in subsection A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer<\/span>’s requests, so long as the controller<\/span> informs the consumer<\/span> of any such extension within the initial 45-day response period, together with the reason for the extension. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> If a controller<\/span> declines to take action regarding the consumer<\/span>’s request, the controller<\/span> shall inform the consumer<\/span> without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal<\/span> the decision pursuant to subsection C. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> Information provided in response to a consumer<\/span> request shall be provided by a controller<\/span> free of charge, up to twice annually per consumer<\/span>. If requests from a consumer<\/span> are manifestly unfounded, excessive, or repetitive, the controller<\/span> may charge the consumer<\/span> a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller<\/span> bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

4.<\/span> If a controller<\/span> is unable to authenticate<\/span> the request using commercially reasonable efforts, the controller<\/span> shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer<\/span> provide additional information reasonably necessary to authenticate<\/span> the consumer<\/span> and the consumer<\/span>’s request. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

5.<\/span> A controller<\/span> that has obtained personal data about a consumer<\/span> from a source other than the consumer<\/span> shall be deemed in compliance with a consumer<\/span>’s request to delete such data pursuant to subdivision A 3 by either (i) retaining a record of the deletion request and the minimum data necessary for the purpose of ensuring the consumer<\/span>’s personal data remains deleted from the business’s records and not using such retained data for any other purpose pursuant to the provisions of this chapter or (ii) opting the consumer<\/span> out of the processing<\/span> of such personal data for any purpose except for those exempted pursuant to the provisions of this chapter. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

C.<\/span> A controller<\/span> shall establish a process<\/span> for a consumer<\/span> to appeal<\/span> the controller<\/span>’s refusal to take action on a request within a reasonable period of time after the consumer<\/span>’s receipt of the decision pursuant to subdivision B 2. The appeal<\/span> process<\/span> shall be conspicuously available and similar to the process<\/span> for submitting requests to initiate action pursuant to subsection A. Within 60 days of receipt of an appeal<\/span>, a controller<\/span> shall inform the consumer<\/span> in writing of any action taken or not taken in response to the appeal<\/span>, including a written explanation of the reasons for the decisions. If the appeal<\/span> is denied, the controller<\/span> shall also provide the consumer<\/span> with an online mechanism, if available, or other method through which the consumer<\/span> may contact the Attorney General<\/span> to submit a complaint. <\/i><\/a><\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nPERSONAL DATA RIGHTS; CONSUMERS (\u00a7 59.1-577)\n\nA. A consumer may invoke the consumer rights authorized pursuant to this\nsubsection at any time by submitting a request to a controller specifying the\nconsumer rights the consumer wishes to invoke. A known child’s parent or\nlegal guardian may invoke such consumer rights on behalf of the child regarding\nprocessing personal data belonging to the known child. A controller shall comply\nwith an authenticated consumer request to exercise the right:\n\n 1. To confirm whether or not a controller is processing the consumer’s\n personal data and to access such personal data;\n\n 2. To correct inaccuracies in the consumer’s personal data, taking into\n account the nature of the personal data and the purposes of the processing of\n the consumer’s personal data;\n\n 3. To delete personal data provided by or obtained about the consumer;\n\n 4. To obtain a copy of the consumer’s personal data that the consumer\n previously provided to the controller in a portable and, to the extent\n technically feasible, readily usable format that allows the consumer to\n transmit the data to another controller without hindrance, where the\n processing is carried out by automated means; and\n\n 5. To opt out of the processing of the personal data for purposes of (i)\n targeted advertising, (ii) the sale of personal data, or (iii) profiling in\n furtherance of decisions that produce legal or similarly significant effects\n concerning the consumer.\n\nB. Except as otherwise provided in this chapter, a controller shall comply with\na request by a consumer to exercise the consumer rights authorized pursuant to\nsubsection A as follows:\n\n 1. A controller shall respond to the consumer without undue delay, but in all\n cases within 45 days of receipt of the request submitted pursuant to the\n methods described in subsection A. The response period may be extended once by\n 45 additional days when reasonably necessary, taking into account the\n complexity and number of the consumer’s requests, so long as the\n controller informs the consumer of any such extension within the initial\n 45-day response period, together with the reason for the extension.\n\n 2. If a controller declines to take action regarding the consumer’s\n request, the controller shall inform the consumer without undue delay, but in\n all cases and at the latest within 45 days of receipt of the request, of the\n justification for declining to take action and instructions for how to appeal\n the decision pursuant to subsection C.\n\n 3. Information provided in response to a consumer request shall be provided by\n a controller free of charge, up to twice annually per consumer. If requests\n from a consumer are manifestly unfounded, excessive, or repetitive, the\n controller may charge the consumer a reasonable fee to cover the\n administrative costs of complying with the request or decline to act on the\n request. The controller bears the burden of demonstrating the manifestly\n unfounded, excessive, or repetitive nature of the request.\n\n 4. If a controller is unable to authenticate the request using commercially\n reasonable efforts, the controller shall not be required to comply with a\n request to initiate an action under subsection A and may request that the\n consumer provide additional information reasonably necessary to authenticate\n the consumer and the consumer’s request.\n\n 5. A controller that has obtained personal data about a consumer from a source\n other than the consumer shall be deemed in compliance with a consumer’s\n request to delete such data pursuant to subdivision A 3 by either (i)\n retaining a record of the deletion request and the minimum data necessary for\n the purpose of ensuring the consumer’s personal data remains deleted\n from the business’s records and not using such retained data for any\n other purpose pursuant to the provisions of this chapter or (ii) opting the\n consumer out of the processing of such personal data for any purpose except\n for those exempted pursuant to the provisions of this chapter.\n\nC. A controller shall establish a process for a consumer to appeal the\ncontroller’s refusal to take action on a request within a reasonable\nperiod of time after the consumer’s receipt of the decision pursuant to\nsubdivision B 2. The appeal process shall be conspicuously available and similar\nto the process for submitting requests to initiate action pursuant to subsection\nA. Within 60 days of receipt of an appeal, a controller shall inform the\nconsumer in writing of any action taken or not taken in response to the appeal,\nincluding a written explanation of the reasons for the decisions. If the appeal\nis denied, the controller shall also provide the consumer with an online\nmechanism, if available, or other method through which the consumer may contact\nthe Attorney General to submit a complaint.\n\nHISTORY: 2021, Sp. Sess. I, cc. 35, 36; 2022, c. 423.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}