Virginia CDPA 59.1-578 A 2: Purpose limitation

Controllers do not process personal data for purposes neither reasonably necessary to nor compatible with those disclosed, unless the consumer consents.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Controller duties and transparency (59.1-578) – Virginia CDPA

59.1-578 A 1 Data minimisation
59.1-578 A 3 Reasonable data security
59.1-578 A 4 Non-discrimination
59.1-578 A 5 Consent for sensitive data
59.1-578 A 6 Ban on selling precise geolocation data
59.1-578 C Privacy notice
59.1-578 D Disclosure of sale and targeted advertising
59.1-578 E Secure means to submit requests

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Virginia CDPA controls