United States of America: Virginia Senate passed Consumer Data Protection Act (SB 1023)

On 4 February 2025, the Consumer Data Protection Act was passed the Virginia Senate. The Act seeks to amend S 59.1-578 of the Code of Virginia, expanding data controller responsibilities under the Consumer Data Protection Act, specifically prohibiting data controllers from selling or offering for sale precise geolocation data concerning consumers. The Act outlines obligations for data controllers to enhance transparency, safeguard personal data, and ensure compliance with both state and federal privacy laws, including the federal Children's Online Privacy Protection Act for the processing of children's data.