On 13 April 2026, the Governor of Virginia signed the Bill amending the Consumer Data Protection Act to prohibit the sale of precise geolocation data. The amendment applies to controllers processing personal and sensitive data, particularly in digital services. It introduces requirements on data minimisation, purpose limitation, security safeguards, and transparency through privacy notices. It also mandates consent for sensitive data processing. It further establishes enhanced protections for children’s data, including restrictions on targeted advertising, profiling, and geolocation tracking, alongside parental consent requirements.
Original source