VCDPA applies to persons that conduct business in Virginia or produce products or services targeted to Virginia residents and that during a calendar year either control or process the personal data of at least 100,000 consumers, or control or process the personal data of at least 25,000 consumers and derive over 50 percent of gross revenue from the sale of personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.