To embed, copy and paste the code into your website or blog: Like the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), the Virginia Consumer Data Protection Act (VCDPA) does not grant a private right of action for alleged violations of its obligations. Rather, enforcement of the VCDPA is the exclusive province of the attorney general (AG) of Virginia. All Fair Information Practice Principles (FIPPs) state that organizations should be accountable for complying with the measures that give effect to the other principles we've discussed throughout this series ( e.g., data quality, purpose specification, use limitation, individual participation, etc.). In this fifth and final installment of our series on the VCDPA, we review the ways in which the VCDPA will be enforced, both inside and outside of court. We also compare Virginia's enforcement mechanisms with California's and give helpful compliance guidance to businesses that will be governed by Virginia's new law.