Virginia Bans Sale of Geolocation Data
On April 13, 2026, Virginia Governor Abigail Spanberger signed into law S.B. 338, which amends the Virginia Consumer Data Protection Act (“VCDPA”) to prohibit the sale of geolocation data. Notably, the VCDPA defines “sale” more narrowly than other state comprehensive privacy laws, as “the exchange of personal data for monetary consideration by the controller to a third party.” The ban on the sale of geolocation data goes into effect on July 1, 2026. Virginia follows Maryland and Oregon in banning the sale of geolocation data. Both Maryland and Oregon more broadly define “sale” to mean the exchange of personal data “for monetary or other valuable consideration.” Virginia joins several other states that have recently proposed legislation with similar bans, including California, Massachusetts, Vermont and Washington State. The legislative activity follows regulatory scrutiny on the sale of geolocation data, including the California Attorney General’s investigation into the location data i
Virginia Bans Sale of Geolocation Data Privacy & Cybersecurity Law Blog Global Privacy and Cybersecurity Law Updates and Analysis Home > Insights > Blogs Virginia Bans Sale of Geolocation Data 1 Minute Read April 16, 2026 Categories: U.S. State Law On April 13, 2026, Virginia Governor Abigail Spanberger signed into law S.B. 338 , which amends the Virginia Consumer Data Protection Act ("VCDPA") to prohibit the sale of geolocation data. Notably, the VCDPA defines "sale" more narrowly than other state comprehensive privacy laws, as "the exchange of personal data for monetary consideration by the
Explore this link on the map →related reading
- California’s Data Deletion Law Imposes a Host of New Obligations on Data Brokers | Insights | Skadden, Arps, Slate, Meagher & Flom LLPskadden.com
- Data Protection Laws and Regulations Report 2025 - 2026 Australiaiclg.com
- We caught Nevada sharing personal health data with Big Tech - The Nevada Independentthenevadaindependent.com
- Thailand Issues First Personal Data Protection Actaseanbriefing.com
- Instinctinstinct.co
- Open Data Networkopendatanetwork.com
- The European Commission is turning Google Search into a privacy and national-security risktechletters.substack.com
- Google Broke Its Promise to Me. Now ICE Has My Data. | Electronic Frontier Foundationeff.org
- Data and Definitions – Stratechery by Ben Thompsonstratechery.com
- Catalog - Data.govcatalog.data.gov
- Aetnahealth.aetna.com
- The New Japanese Privacy Law: What Businesses Need to Knowauth0.com