Virginia Enacts Ban on Sale of Geolocation Data

Virginia has enacted a statewide ban on the commercial sale of geolocation data, marking one of the most comprehensive privacy measures in the United States to date. The legislation, which took effect on July 1, 2024, prohibits any entity from selling precise location information that can be linked to an individual without explicit consent, and it applies to both in‑state and out‑of‑state businesses that collect data from Virginia residents.

Under the new law, “geolocation data” is defined as any digital record that reveals the precise physical location of a person’s device at a specific time, including GPS coordinates, Wi‑Fi triangulation, and cell‑tower signals. The ban does not extend to data used for emergency services, law‑enforcement investigations, or anonymized aggregates that cannot be re‑identified. Violations are subject to civil penalties of up to $7,500 per incident, and the state’s Attorney General is authorized to enforce compliance through investigations and litigation. The measure follows similar statutes adopted in Colorado, Connecticut, and Utah, reflecting a growing trend among states to restrict the monetization of location‑based information amid rising concerns over surveillance and data misuse.

The law’s passage has drawn attention from privacy advocates and technology firms alike, with the announcement receiving 164 points and 20 comments on the Hacker News discussion forum, indicating significant public interest. Companies that collect or process geolocation data are now required to revise their data‑handling practices, obtain clear consent from users, and implement robust safeguards to avoid penalties, signaling a shift toward stricter data‑privacy standards nationwide.