Va. Code § 18.2-265.15
A pharmacy or retail distributor that sells any product containing ephedrine or related compounds shall not use or disclose the information in the system or a written log for any purpose other than (i) to ensure compliance with this article or the federal Combat Methamphetamine Epidemic Act of 2005, (ii) to comply with the United States government or a political subdivision thereof for law-enforcement purposes pursuant to state or federal law, or (iii) to facilitate a product recall necessary to protect public health and safety. A pharmacy or retail distributor shall report information in the written log or electronic system to law-enforcement personnel upon request, and any pharmacy or retail distributor that in good faith releases such information to federal, state, or local law-enforcement officers, or to any person acting on behalf of such officers, shall be immune from civil liability for the release unless the release constitutes gross negligence or intentional, wanton, or willful misconduct.
Va. Code § 18.2-265.15