The Virginia law received an F grade in a 2024 report by the Electronic Privacy Information Center and US PIRG Education Fund due to its lack of substantial consumer protections.

"It kind of baked into law the status quo of allowing companies to just put whatever they want in their privacy policies and as long as it’s in their privacy policies, it’s OK to do," Caitriona Fitzgerald, deputy director of EPIC and an author of the report, said.

Read more here.