Va. Code Ann. § 2.2-3815
A. Except as otherwise provided in this chapter, the first five digits of a social security number contained in a public record shall be confidential and exempt from disclosure under the Freedom of Information Act (§ 2.2-3700 et seq.).
For the purposes of this chapter:
"Agency" means the same as that term is defined in § 2.2-3801, unless the context requires otherwise.
"Data subject" means the same as that term is defined in § 2.2-3801.
"Public record" means the same as that term is defined in § 2.2-3701, but shall not include any records required by law to be maintained by the clerks of the courts of record, as defined in § 1-212, or courts not of record, as defined in § 16.1-69.5.
"Regional agency" means a unit of government organized as provided by law whose members are appointed by the participating local governing bodies, and such unit includes two or more counties, cities, or towns.
B. The provisions of this section shall not be construed to prevent the release of a social security number:
2009, c. 213.