The Department shall release to a requester information that is required for a requester to carry out the requester's official functions in accordance with this subdivision. If the requester has entered into an agreement with the Department, such agreement shall be in a manner prescribed by the Department, and such agreement shall contain the legal authority that authorizes the performance of the requester's official functions and a description of how such information will be used to carry out such official functions. If the Commissioner determines that sufficient authority has not been provided by the requester to show that the purpose for which the information shall be used is one of the requester's official functions, the Commissioner shall refuse to enter into any agreement. If the requester submits a request for information in accordance with this subdivision without an existing agreement to receive the information, the request shall be in a manner prescribed by the Department, and such request shall contain the legal authority that authorizes the performance of the requester's official functions and a description of how such information will be used to carry out such official functions. If the Commissioner determines that sufficient authority has not been provided by the requester to show that the purpose for which such information shall be used is one of the requester's official functions, the Commissioner shall deny such request.
Notwithstanding the provisions of this subdivision, the Department shall not disseminate to any federal, state, or local government entity, law-enforcement officer, or law-enforcement agency any privileged information for any purposes related to civil immigration enforcement unless (i) the subject of the information provides consent or (ii) the requesting agency presents a lawful judicial order, judicial subpoena, or judicial warrant. When responding to a lawful judicial order, judicial subpoena, or judicial warrant, the Department shall disclose only those records or information specifically requested. Within three business days of receiving a request for information for the purpose of civil immigration enforcement, the Commissioner shall send a notification to the individual about whom such information was requested that such a request was made and the identity of the entity that made such request.
The Department shall not enter into any agreement pursuant to subsection E with a requester pursuant to this subdivision unless the requester certifies that the information obtained will not be used for civil immigration purposes or knowingly disseminated to any third party for any purpose related to civil immigration enforcement.
Any agreement entered into pursuant to this subsection between the Department and the Department of State Police shall specify (i) that privileged information shall be distributed only to authorized personnel of an entity meeting the definition of a criminal justice agency as defined in § 9.1-101 and other comparable local, state, and federal criminal justice agencies and entities issued a Virginia S-Originating Agency Identification (S-ORI) status; (ii) that privileged information shall be accessed, used, and disseminated only for the administration of criminal justice as defined in § 9.1-101; and (iii) that no local, state, or federal government entity, through the Virginia Criminal Information Network (VCIN) or any other method of dissemination controlled by the Department of State Police, has access to information stored by the Department in violation of the protections contained in this section. The Department of State Police shall notify the Department prior to when a new entity is to be granted S-ORI status and provide a copy of the S-ORI application to the Department. The Department of State Police shall not allow any entity to access Department data through VCIN if the Department objects in writing to the entity obtaining such data.
The provisions of this subsection shall not apply to (a) requests for information made pursuant to subdivision B 4; (b) a request made by an entity authorized to receive privileged information pursuant to subsection B, provided that such request is made on a form provided by the Department, other than a written agreement, that requires the requester to certify that such entity is entitled to receive such information pursuant to this title, state the purpose authorized pursuant to subsection B that forms the basis for the request, explain why the information requested is necessary to accomplish the stated purpose, and certify that the information will be used only for the stated purpose and the information received shall not be disseminated to third parties unless there is authorization to do so; or (c) the release of information to a law-enforcement officer or agency during an emergency situation, provided that (1) the requesting entity is authorized to receive such information pursuant to subdivision B 9, (2) the timely release of such information is in the interest of public safety, and (3) the requesting entity completes the form required pursuant to clause (b) within 48 hours of the release of such information.
Va. Code § 46.2-208