United States of America: Law amending Consumer Data Protection Act to prohibit sale of precise geolocation data enters into force (SB 338)

On 1 July 2026, the Law amending the Consumer Data Protection Act to prohibit the sale of precise geolocation data enters into force. The amendment applies to controllers processing personal and sensitive data, particularly in digital services. It introduces requirements on data minimisation, purpose limitation, security safeguards, and transparency through privacy notices. It also mandates consent for sensitive data processing. It further establishes enhanced protections for children’s data, including restrictions on targeted advertising, profiling, and geolocation tracking, alongside parental consent requirements.