Crawls the web, in Virginia

Va. Code Ann. §§ 59.1-575 to 59.1-584 · Read the law's page

• Personal data that is lawfully made available through a government record, or that you have a reasonable basis to believe is lawfully made available to the public through widely distributed media, by the consumer, or by someone the consumer disclosed it to, falls outside VCDPA's definition of personal data, unless the consumer restricted it to a specific audience.
• Cite this Act as Va. Code Ann. §§ 59.1-575 to 59.1-584, not sections 59.1-571 to 59.1-585; section 59.1-571 is now a different, unrelated Act's definitions section.
• If you are a controller subject to VCDPA, do not sell or offer for sale a consumer's precise geolocation data (section 59.1-578(A)(6), added by SB 338 and in force since July 1, 2026).

Va. Code Ann. § 18.2-152.4 · Read the law's page

• Ordinary, non-disruptive automated access to a Virginia-connected public page does not by itself violate this statute; it requires malicious intent or intentionally deceptive means, plus removing, disabling, altering, or damaging data, programs, software, or operation.
• Intentionally deceptive circumvention of a technical barrier to disable or alter data or programs squarely fits this statute's elements.
• This statute does not override or displace an ordinary contract or license governing your access to a Virginia-connected computer service; ToS enforcement is a separate, civil track.
• Do not, with malicious intent, or through intentionally deceptive means and without authority, install or cause to be installed, or collect information through, computer software that records all or a majority of the keystrokes made on the computer of another (Va. Code Ann. section 18.2-152.4(A)(8)).
• Do not, with malicious intent, or through intentionally deceptive means and without authority, install or cause to be installed on the computer of another computer software for the purpose of taking control of that computer so that it can cause damage to another computer, or of disabling or disrupting the ability of the computer to share or transmit instructions or data to other computers or to any related computer equipment or devices (Va. Code Ann. section 18.2-152.4(A)(9)).