Virginia CDPA 59.1-578 D: Disclosure of sale and targeted advertising

Controllers that sell personal data or process it for targeted advertising must clearly and conspicuously disclose that processing and how consumers can opt out.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Controller duties and transparency (59.1-578) – Virginia CDPA

59.1-578 A 1 Data minimisation
59.1-578 A 2 Purpose limitation
59.1-578 A 3 Reasonable data security
59.1-578 A 4 Non-discrimination
59.1-578 A 5 Consent for sensitive data
59.1-578 A 6 Ban on selling precise geolocation data
59.1-578 C Privacy notice
59.1-578 E Secure means to submit requests

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Virginia CDPA controls