Virginia bans sale of geolocation data, joining growing state trend
New law takes effect July 1, 2026, following Maryland and Oregon.
Virginia has become the latest state to restrict the sale of geolocation data, with Governor Abigail Spanberger signing S.B. 388 into law on April 13, 2026. The ban amends the Virginia Consumer Data Protection Act (VCDPA) and takes effect July 1, 2026. Under the VCDPA, "sale" is defined narrowly as the exchange of personal data for monetary consideration by the controller to a third party. This differs from similar laws in Maryland and Oregon, which define "sale" to include exchanges for monetary or other valuable consideration.
Virginia joins a growing list of states taking action on geolocation data sales. Similar legislation has been proposed in California, Massachusetts, Vermont, and Washington State. The move follows heightened regulatory scrutiny, including a March 2025 investigation by the California Attorney General into the location data industry and a 2024 FTC settlement that banned a data broker from selling geolocation data. The trend reflects increasing concern over privacy risks associated with location tracking and data brokerage.
- Virginia Governor Spanberger signed S.B. 388 on April 13, 2026, amending the VCDPA to ban sale of geolocation data.
- Ban takes effect July 1, 2026; Virginia's definition of 'sale' is limited to monetary consideration only.
- Follows similar bans in Maryland and Oregon, plus proposals in CA, MA, VT, WA; spurred by recent FTC and state AG actions.
Why It Matters
Geolocation data sales face growing legal barriers, signaling stricter privacy enforcement nationwide.