To answer this question, please select “yes” if you control or process the personal information of 25,000 or more residents of Virginia per year or select “no” if you do not control or process the personal information of 25,000 or more residents of Virginia per year. 


“Personal information” is generally defined as any information that could be used to identify a particular person or any information that relates to an identified person. Examples of personal information include: 

  • Name; 

  • Email; 

  • Physical address; 

  • Phone number; or IP address. 


Websites and applications will usually collect personal information through features such as: 

  • Contact forms; 

  • Email newsletter sign up forms; 

  • Analytics features (e.g. Google Analytics); 

  • eCommerce; 

  • Advertising (e.g. Facebook Pixel). 


“Controlling” means determining the purpose and means of processing personal information. For example, if you determine whether individuals are added to an email marketing list or whether a contact form inquiry will be responded to, then you are controlling the personal information submitted to your website or application. 


“Processing” means any operation or set of operations performed on personal information such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal information. For example, if you collect personal information, then you are processing personal information. 

Related Privacy laws

This question will help the software determine whether the Virginia Consumer Data Protection Act (VCDPA) may apply to you.