<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>71726</law_id><section_number>59.1-584</section_number><catch_line>Enforcement; civil penalty; expenses</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="59.1">Trade and Commerce</unit><unit label="chapter" level="2" order_by="1" identifier="53">Consumer Data Protection Act</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> The <span class="dictionary">Attorney General</span> shall have exclusive authority to enforce the provisions of this chapter. <a id="paragraph-258419" class="section-permalink" href="https://vacode.org/59.1-584/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Prior to initiating any action under this chapter, the <span class="dictionary">Attorney General</span> shall provide a <span class="dictionary">controller</span> or <span class="dictionary">processor</span> 30 days&#x2019; written notice identifying the specific provisions of this chapter the <span class="dictionary">Attorney General</span> alleges have been or are being violated. If within the 30-day period the <span class="dictionary">controller</span> or <span class="dictionary">processor</span> cures the noticed violation and provides the <span class="dictionary">Attorney General</span> an express written statement that the alleged violations have been cured and that no further violations shall occur, no action shall be initiated against the <span class="dictionary">controller</span> or <span class="dictionary">processor</span>. <a id="paragraph-258420" class="section-permalink" href="https://vacode.org/59.1-584/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> If a <span class="dictionary">controller</span> or <span class="dictionary">processor</span> continues to violate this chapter following the cure period in subsection B or breaches an express written statement provided to the <span class="dictionary">Attorney General</span> under that subsection, the <span class="dictionary">Attorney General</span> may initiate an action in the name of the Commonwealth and may seek an <span class="dictionary">injunction</span> to restrain any violations of this chapter and civil penalties of up to $7,500 for each violation under this chapter. All civil penalties, expenses, and attorney fees collected pursuant to this chapter shall be paid into the state treasury and credited to the Regulatory, <span class="dictionary">Consumer</span> Advocacy, <span class="dictionary">Litigation</span>, and Enforcement Revolving Trust Fund. <a id="paragraph-258421" class="section-permalink" href="https://vacode.org/59.1-584/#C"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> The <span class="dictionary">Attorney General</span> may recover reasonable expenses incurred in investigating and preparing the case, including attorney fees, in any action initiated under this chapter. <a id="paragraph-258422" class="section-permalink" href="https://vacode.org/59.1-584/#D"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> Nothing in this chapter shall be construed as providing the basis for, or be subject to, a private right of action for violations of this chapter or under any other <span class="dictionary">law</span>. <a id="paragraph-258423" class="section-permalink" href="https://vacode.org/59.1-584/#E"><i class="fa fa-link"/></a></p></section></text><history>2021, Sp. Sess. I, cc. 35, 36; 2022, cc. 451, 452.</history><metadata></metadata></law>
