Virginia Code § 59.1-584 — Consumer-data enforcement: Attorney General and no private action

AI-use reference. Current. Applies to: Attorney General and covered controllers/processors Requirements or purpose: The Attorney General has the enforcement role; statutory notice and cure procedures apply, with civil penalties up to $7,500 per violation as provided. Limits: § 59.1-576 exempts state/local governmental bodies, HIPAA entities/business associates, specified financial entities/data, nonprofits and higher education; numerous data exemptions also apply. Not a city-wide AI regulation; applicability to a private supplier depends on its activities and exemptions. Chapter expressly supplies no private right of action. Do not substitute this remedy for GDCDPA’s distinct injunction/mandamus route.