SECURITY ADDENDUM (ENTERPRISE SAAS)
Virginia Jurisdictional Version
KEY PROVISIONS
Data Breach Notification (Va. Code Section 18.2-186.6)
- Notify without unreasonable delay
- Notify VA Attorney General if >1,000 affected
- Credit monitoring may be required
Virginia Consumer Data Protection Act (VCDPA) (effective 2023)
- Consumer rights: access, correction, deletion, portability, opt-out
- Data protection assessments required
- 45-day response period
- No private right of action
Personal Information Definition
Name with: SSN, driver's license, financial account number, passport, military ID.
Trade Secrets
Virginia UTSA (Va. Code Section 59.1-336 et seq.)
E-Signatures
Virginia UETA (Va. Code Section 59.1-479 et seq.)
Late Payment
6% per annum statutory rate; up to 12% by contract
Forum
Virginia (exclusive). Jury waiver permitted.
EXECUTION
☐ Master Agreement referenced ☐ Virginia-licensed counsel review