Virginia Consumer Data Protection Act (VCDPA) Awareness Course

Included in Plus Delivery: 100% online Duration: Approximately 29 minutes plus introduction Certificate on Completion

Virginia enacted the VCDPA in 2021; it took effect on 1 January 2023. Applicability depends on statutory thresholds and exemptions. The Act’s 30-day cure process has specific notice and written-statement requirements.

22,000+ learners across our course collection. Immediate access. Start learning now. Not happy? 14 day 100% money-back guarantee. Major credit and debit cards accepted.

Virginia was the second US state to pass comprehensive privacy legislation - and its framework has become the template for most states that followed. Understanding the VCDPA isn't just about Virginia compliance; it's about understanding the baseline model for US state privacy law.

This course gives your team practical guidance on the Virginia Consumer Data Protection Act. We cover who the law applies to, what rights Virginia residents have, the stricter requirements for sensitive data, and what happens when things go wrong.

The VCDPA requires opt-in consent for sensitive data - stricter than California. It also provides a 30-day cure period before enforcement, but penalties can reach $7,500 per violation. No technical background required - just focused, practical training your team can apply immediately.

Learning with us

Virginia course preview explaining Virginia's privacy law beside a blue shield

Virginia Consumer Data Protection Act course slide 3

Virginia Consumer Data Protection Act course slide 5

Virginia Consumer Data Protection Act course slide 6

Virginia course preview: possible sources of reports to the Attorney General

Why learn about the VCDPA?

Understand the template that 10+ other US states have followed
Know when opt-in consent is required for sensitive data
Handle consumer data requests correctly within required timeframes
Avoid penalties of up to $7,500 per violation
Understand the 2025 amendments strengthening children's data protections

Course features

Virginia-specific

Focused entirely on the VCDPA with Virginia-specific requirements, thresholds, and enforcement context.

Practical scenarios

Practical workplace examples showing how the VCDPA applies in everyday business situations.

Virginia updates included

Covers children's data protections and the prohibition on selling precise geolocation data.

Official sources

Built from the Virginia Code and Attorney General guidance, with references to official documentation.

Course information

Learning outcomes

Understand when and how the VCDPA applies to your organisation
Know the rights Virginia residents have over their personal data
Recognise sensitive data and understand the opt-in consent requirement
Handle consumer data requests correctly within required timeframes
Understand enforcement, the cure period, and potential penalties

Training recommendations

All employees who handle customer data should complete this training.
Annual refresher training is recommended to stay current with amendments and enforcement trends.
Teams handling sensitive data or consumer requests may benefit from additional role-specific training.

This course is recommended for

Employees who handle customer data at organisations that conduct business in Virginia or target Virginia residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform.

Course content

Section 1: Welcome and Legal Notices

Start with the course introduction and legal notices.

Lessons

Welcome to Virginia VCDPA Awareness
Important Legal Notices

Section 2: Virginia Privacy Awareness

Learn about consumer rights, sensitive data, responsible data use and practical escalation.

Lessons

What Virginia’s Privacy Law Means at Work
What Consumers Can Ask For
Sensitive Data Needs Extra Care
Handling Data the Right Way
Practice Everyday Privacy Decisions
When Something Goes Wrong

Section 3: Final Assessment

Check your understanding with ten multiple-choice questions, including workplace scenarios.

Lessons

Virginia VCDPA: Final Assessment

How it works

Step 1

Buy course seats

Purchase seats online, then start learning or invite your team members.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As the VCDPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and amendments.

What's included

Training

Distraction-free online learning platform
Multiple-choice end of course assessment

Updates

Access to all course material updates and enhancements for the length of your access period

Certification

Certificate on completion

Course FAQs

Will I get a certificate?

A digital certificate is available when you complete the course, including passing the final assessment. You can add it to your LinkedIn profile.

Who should take this course?

This course is designed for employees who handle customer data at organisations that may be subject to Virginia's privacy law. This includes marketing, sales, customer service, HR, and IT teams.

How is VCDPA different from GDPR?

While both laws protect personal data, there are key differences. VCDPA applies to Virginia residents and has different thresholds for applicability. It also provides a 30-day cure period before enforcement action, which GDPR does not. However, VCDPA requires opt-in consent for sensitive data, similar to GDPR's approach.

Does VCDPA apply to my organisation?

The VCDPA generally applies to organisations that conduct business in Virginia or target Virginia residents and either control or process personal data of at least 100,000 consumers during a calendar year, or control or process data of at least 25,000 consumers and derive more than 50% of gross revenue from selling personal data. Statutory exemptions apply.

What are the penalties for non-compliance?

The Virginia Attorney General may seek civil penalties of up to $7,500 per violation. Before an action, the Attorney General must give 30 days’ written notice; a controller or processor that cures the noticed violation and provides the required written statement can avoid that action. The VCDPA does not create a private right of action.

Is there a money back guarantee?

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

How long does the course take?

Allow approximately 29 minutes for teaching, assessment and reflection, plus a separate introduction of just over three minutes. You can pause and resume at any time, and your progress is automatically saved.