Your data privacy rights in Virginia

Virginia residents have an affirmative legal right to demand that a business delete their personal information, under the Virginia Consumer Data Protection Act. A business has 45 days to respond to a verified request. That is a deadline with a statute behind it, not a suggestion — and it is the instrument we file on your behalf rather than a courtesy opt-out form.

Statute

VCDPA

Citation

Va. Code § 59.1-575 et seq.

In effect since

January 1, 2023

Right to deletion

Yes

Response deadline

45 days

Enforced by

State AG

1. 01Find the broker's designated privacy channelEvery broker operating in Virginia publishes one. If they registered in California, the exact URL is on their state filing — we list it on each broker page.
2. 02Send a written deletion request that cites the statuteName the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.) explicitly and state that you are exercising your right to deletion. Citing the statute changes how the request is routed inside the company — it moves from a support queue to a compliance queue.
3. 03State the deadline on the face of the requestWrite that you expect a substantive response within 45 days as the statute requires. Ask for written confirmation of deletion.
4. 04Verify your identity, carefullyThey may ask you to prove who you are. Give the minimum that satisfies the request. Never send a full Social Security number, and be wary of any broker that asks for more identifying data than it already holds.
5. 05Keep everythingSave the request, the timestamp and any response. If the 45 days pass in silence, that record is what you file with the state Attorney General.
6. 06Re-check in 90 daysDeletion is not permanent. Brokers re-acquire your data from upstream sources and re-list you, typically within 3–6 months. This is the step almost everyone skips, and it is why one-off removal does not hold.