Virginia Code § 59.1-575 — Consumer data protection: profiling and sensitive-data definitions

AI-use reference. Current. Applies to: Covered private controllers/processors and Virginia consumers Requirements or purpose: Defines profiling as automated processing evaluating/predicting personal aspects; legally significant decisions include specified lending, housing, insurance, education, criminal justice, employment, health and basic-needs decisions. Limits: Consumer definition excludes commercial/employment context. Biometric-data definition excludes photographs, recordings and data generated from them, and specified HIPAA information. § 59.1-576 exempts state/local governmental bodies, HIPAA entities/business associates, specified financial entities/data, nonprofits and higher education; numerous data exemptions also apply.