There are many differences. It's easier to focus on the similarities, including:
Transparency/disclosure obligations.
Consumer rights to access, delete, and correct their personal data.
Importantly, VCDPA requires businesses to enable consumers to opt out from sales of data to third parties, targeted advertising, and certain profiling. These are narrower and more specific obligations than the broad GDPR right to object to processing, which encompasses these types of disclosures, but is not specifically limited to covering those disclosures.
Additionally, the VCDPA also provides consumers with the right to appeal a business's refusal to effectuate a data subject request through an appeal process provided by the business that must be 'conspicuously available'. Such an appeal process is not required by the GDPR.