Va. Code § 37.2-411
All services provided or delivered under any license shall be subject to review or inspection at any reasonable time by any authorized inspector or agent of the Department. The Commissioner or his authorized agents shall inspect all licensed providers and shall have access at all reasonable times to all services and records, including medical records. Records that are confidential under federal or state law shall be maintained as confidential by the Department and shall not be further disclosed except as permitted by law; however, there shall be no right of access to communications that are privileged pursuant to § 8.01-581.17. The Commissioner shall call upon other state or local departments to assist in the inspections and those departments shall render an inspection report to the Commissioner. After receipt of all inspection reports, the Commissioner shall make the final determination with respect to the condition of the service so reviewed or inspected. The Commissioner or his authorized agents shall make at least one annual unannounced inspection of each service offered by each licensed provider. Inspections shall be focused on preventing specific risks to individuals receiving services, including an evaluation of the physical facilities in which the services are provided. In addition, the Commissioner shall promptly investigate all complaints. The Board may adopt and the Commissioner shall enforce reasonable regulations that may be necessary or proper to carry out the general purposes of this article.
Va. Code § 37.2-411