Texas vs Virginia Privacy Law Comparison
Understanding the differences between Texas's TDPSA and Virginia's VCDPA is essential for businesses operating across state lines. Texas's law became effective July 1, 2024, while Virginia's law took effect January 1, 2023. Below is a detailed side-by-side comparison covering applicability thresholds, consumer rights, enforcement, and more.
Reviewed by PrivacyLawMap editorial team · Last verified: 2026-07-18
Start with the Texas data privacy law guide and the Virginia data privacy law guide for the full state-specific thresholds, rights, source links, and checklist steps behind this comparison.
To weigh the real-world stakes behind these two laws, see documented TDPSA fines and privacy penalties from actual state enforcement actions in the penalties tracker.
TDPSA vs VCDPA: the key differences at a glance
The biggest difference between Texas's TDPSA and Virginia's VCDPA (as of 2026) is that TDPSA and VCDPA are structurally similar comprehensive privacy laws, so the sharpest contrasts sit in their thresholds, cure periods, and enforcement details.
- Maximum civil penalty: TDPSA up to $7,500 per violation vs VCDPA up to $7,500 per violation.
- Right to cure: TDPSA has 30-day cure period vs VCDPA with 30-day cure period.
- Private right of action: no under TDPSA vs no under VCDPA.
- Universal opt-out (GPC) signals: must be honored under TDPSA vs not mandated under VCDPA.
- Effective date: TDPSA since July 1, 2024 vs VCDPA since January 1, 2023.
Primary sources: TDPSA Chapter 541 Text (Texas Statutes) · VCDPA Full Text (Virginia Code Title 59.1, Chapter 53) · Verified 2026-07-18.
Swipe the table sideways to see every state column.
| Category | Texas TDPSA | Virginia VCDPA |
|---|---|---|
| Thresholds & Applicability | ||
Effective Date | Jul 1, 2024 | Jan 1, 2023 |
Revenue Threshold | None | None |
Consumer Count | None | 100,000 |
Data Sale % Threshold | None | 50% |
| Consumer Rights | ||
Right to Access | ||
Right to Deletion | ||
Right to Correction | ||
Opt-Out of Sale | ||
Opt-Out Targeted Ads | ||
Opt-Out Profiling | ||
Limit Sensitive Data | ||
Right to Appeal | ||
Private Right of Action | ||
| Enforcement & Compliance | ||
Universal Opt-Out Required | ||
Cure Period | 30 days | 30 days |
Penalty / Violation | $7,500 | $7,500 |
Enforcement Body | Texas Attorney General | Virginia Attorney General |
Sensitive Data Consent | Opt-In | Opt-In |
Data Broker Provisions | Texas has a separate Data Broker Law (HB 4460, effective September 1, 2023) requiring data brokers to register with the Secretary of State, pay annual fees, and post conspicuous data collection notices. Non-compliance can result in penalties of up to $100 per day. | The VCDPA does not include specific data broker registration requirements. Data brokers are subject to the same obligations as other controllers under the law. |
Highlighted rows indicate differences between the two states
Texas vs Virginia: Common Questions
Not sure if Texas or Virginia privacy laws apply to you?
Our free calculator analyzes your business details and tells you exactly which state privacy laws you need to comply with.