In accordance While using the VCDPA and also the CPA, firms that obtain private data of Colorado and Virginia Users Possess a duty to offer detect to the user concerning the groups of private information and facts to be gathered and also the functions for which the classes of non-public data are gathered or used and whether that information is sold