The gold standard for data privacy documents

The VCDPA goes into effect January 1, 2023. SixFifty’s VCDPA documents can help your business prepare and stay compliant.

Documents included with Virginia Privacy (VCDPA)

SixFifty walks you through a series of key questions guiding, prompting, and connecting the dots to automatically generate your documents. If you are audited, these documents help to prove and time-stamp your compliance.

Virginia Data Protection Assessment

This Virginia Data Protection Assessment document memorializes your analysis of whether certain high-risk activities, such as selling personal information, are justified.

Virginia Data Protection Assessment Quiz

This Data Protection Assessment Quiz helps you determine whether you need to complete a full Data Protection Assessment for a particular use of personal information. In general, Data Protection Assessments are only required for certain high-risk activities, such as selling personal information.

Virginia Data Processing Agreement - Controller or Processor

Controller

This is a Data Processing Agreement between your business and your vendor/service provider. It is intended to be included as an attachment to a Master Services Agreement.

Processor

This is a Data Processing Agreement between your business and the company on whose behalf you act as a vendor/service provider. It is intended to be included as an attachment to a Master Services Agreement.

Virginia Policy - Controller or Processor

Controller

This document outlines how your company will handle personal information from consumers as a controller of personal information. This is meant to be an internal document, so it should be available to individuals within your company.

Processor

This document outlines how your company will handle personal information from consumers as a processor of personal information on behalf of a controller. This is meant to be an internal document, so it should be available to individuals within your company.

Virginia Privacy Notice

This document discloses specifics about how your company handles Virginians’ personal data and what rights Virginia consumers have under the law. You must post the text of this document on your website. It may be included as part of your general privacy policy, or as a separate webpage linked from your general privacy policy. This notice takes into account requirements in Virginia which will not go into effect until January 1, 2023, so your organization may prefer to wait until that time to post the notice. We recommend waiting to post this notice until you have reviewed it thoroughly and are ready to comply with all of the representations this policy makes.

Need more than compliance documents?

SixFifty offers solutions for request management. Schedule a demo to learn more.