United States of America: Virginia Legislature adopted Bill amending Consumer Data Protection Act to prohibit sale of precise geolocation data (SB 338)

On 5 March 2026, the Legislature of Virginia adopted a Bill amending the Consumer Data Protection Act to prohibit the sale of precise geolocation data. The amendment applies to controllers processing personal and sensitive data, including in digital services. It introduces obligations related to data minimisation, purpose limitation, security safeguards, and transparency through privacy notices. It also requires consent for the processing of sensitive data. In addition, it establishes provisions concerning children’s data, including restrictions on targeted advertising, profiling, and geolocation tracking, as well as parental consent requirements.