Virginia Code § 59.1-578 — Consumer data controllers: minimization, security, nondiscrimination and children

AI-use reference. Current. Applies to: Covered controllers Requirements or purpose: Requires minimization, compatible purposes/consent, reasonable security, nondiscrimination and sensitive-data consent. Requires privacy notice and request mechanisms. Known-child profiling for legally significant decisions and specified other activities require parental consent under COPPA conditions. Limits: § 59.1-576 exempts state/local governmental bodies, HIPAA entities/business associates, specified financial entities/data, nonprofits and higher education; numerous data exemptions also apply. Not a city-wide AI regulation; applicability to a private supplier depends on its activities and exemptions. Children’s conditions inF must be read with consent clauseF(3).