Privacy Law Library

Consumer Reporting Agencies (security freezes; medical debt reporting ban)

VA credit freeze

Credit reporting · Financial · Children · Health

Lets Virginia consumers freeze their credit reports free of charge, with deadlines for placing and temporarily lifting freezes, and lets parents or guardians freeze or create a record for children under 16 and incapacitated adults. Since 2024 it also bars health care providers and collectors from reporting medical debt to credit bureaus.

Where
Virginia
Citation
Va. Code §§ 59.1-444.1 to 59.1-444.4 (Title 59.1, Chapter 35.1)
Status
In force
In force since
2008-07-01
Last amended
2024-07-01
Enforced by
Consumers by private action; Attorney General exclusively for electronic-lift timing and protected-consumer placement violations (59.1-444.2(U), 59.1-444.3(M)); medical debt reporting through the VCPA (59.1-444.4(C))
People can sue
Yes
Penalties
Willful violations: actual damages or $100 to $1,000, punitive damages, fees and costs; negligent violations: actual damages plus fees (59.1-444.2(Q), (S)). Attorney General civil penalty up to $1,000 per willful violation (59.1-444.2(U)).
Applies to
  • Consumer reporting agencies holding credit files on Virginia consumers (59.1-444.2)
  • Parents, guardians, and representatives of protected consumers under 16 or incapacitated (59.1-444.3)
  • Medical care facilities, licensed health professionals, EMS agencies, and medical debt collectors (59.1-444.4)

Rights it gives people

  • Place a security freeze within three business days of a mailed request or one business day of an electronic request; confirm in writing within 10 business days with a PIN or password.Va. Code § 59.1-444.2(C)-(D)
  • Temporarily lift a freeze within 15 minutes of an electronic request or three business days of a mailed request.Va. Code § 59.1-444.2(F)
  • Place a security freeze or create a record for a protected consumer under 16 or under guardianship at a representative's request, free of charge.Va. Code § 59.1-444.3

Practices it requires

  • Do not charge a fee to place a freeze.Va. Code § 59.1-444.2 (required notice text)
  • Health care providers, EMS agencies, and medical debt collectors must not report any medical debt to a consumer reporting agency.Va. Code § 59.1-444.4(A)-(B) · From 2024-07-01

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: Effective dates inferred from Virginia's default July 1 effective date for regular-session acts; enacting bill pages not checked. History: 2008, cc. 480, 496; amended 2009, 2014, 2018, 2020; 2024, c. 751 (medical debt).

Research reference, not legal advice.