TL;DR
Concerns over privacy have led to the sale of geolocation data being viewed as problematic. Virginia's new law, S.B. 388, specifically prohibits this practice starting July 1, 2026.
✦ Why It Matters
Engineers and researchers should be aware of evolving privacy laws that may impact data collection practices.
Key Takeaways
Full Summary
Geolocation data, which reveals individuals' locations, has raised significant privacy concerns, prompting states to take action. Virginia's S.B. 388 amends the Virginia Consumer Data Protection Act (VCDPA) to prohibit the sale of such data, defining 'sale' as the exchange of personal data for money to a third party.
This law will take effect on July 1, 2026, and follows similar bans in Maryland and Oregon, which have broader definitions of 'sale.' Recent scrutiny from regulators, including investigations by the California Attorney General and a Federal Trade Commission (FTC) settlement, has highlighted the risks associated with selling geolocation data.
As a result, several states, including California and Massachusetts, are considering similar legislation. This trend indicates a growing recognition of the need for stronger privacy protections in the digital age.
Related