Virginia

Virginia's FOIA provides broad access to public records and meetings of state and local government bodies, with required response timelines.

In Virginia, a single statute (the Virginia FOIA, Va. Code §§ 2.2-3700 to 2.2-3715) governs both public records and open meetings. The open-meetings provisions are at §§ 2.2-3707 to 2.2-3714. The records provisions are at §§ 2.2-3704 to 2.2-3706 — see the Open Records section above for the records framework.

One of the more detailed frameworks. Formal competitive sealed bidding above $100,000. Strong small, women-owned, and minority business programs. eVA electronic procurement system for state and many local agencies.

Virginia's data breach notification statute requires individuals and entities to notify the Attorney General and affected Virginia residents when unencrypted personal information is accessed without authorization in a way that causes or is likely to cause identity theft or fraud. The law defines personal information, sets notification procedures including substitute notice for large breaches, and authorizes civil penalties up to $150,000 per breach.

Virginia's comprehensive privacy law — the first to follow the CCPA in 2023. Became the template for many subsequent state privacy laws including CO, CT, UT, and others.