The regulatory board or department may enter into a contract to obtain the fingerprints and descriptive information as required for submission to the Central Criminal Records Exchange in a manner and format approved by the Central Criminal Records Exchange.
The Central Criminal Records Exchange, upon receipt of an applicant's record or notification that no record exists, shall make a report to the regulatory board or department or their designee, who must belong to a governmental entity. If an applicant is denied a registration, license or certificate because of the information appearing in his criminal history record, the regulatory board or department shall notify the applicant that information obtained from the Central Criminal Records Exchange contributed to such denial. The information shall not be disseminated except as provided for in this section.
Va. Code § 54.1-204