Virginia Bans Sale of Precise Geolocation Data Under New Privacy Law
Governor Spanberger signed SB338, banning the sale of precise geolocation data in Virginia from July 2026.
Why it matters: The new law expands consumer privacy rights and imposes fresh compliance demands on companies handling location data. Legal and privacy teams need to update practices ahead of the July 2026 effective date.
- SB338 amends the Virginia Consumer Data Protection Act to ban sale of precise geolocation data.
- The law defines 'precise geolocation data' as information pinpointing a person within 1,750 feet.
- Virginia follows Maryland and Oregon as the third state with such a ban.
- The law enjoyed unanimous, bipartisan legislative support.
On April 13, 2026, Virginia Governor Abigail Spanberger signed Senate Bill 338 (SB338), making Virginia the third state to prohibit the sale of consumers' precise geolocation data, alongside Maryland and Oregon.
- The new restriction amends the Virginia Consumer Data Protection Act (VCDPA), becoming effective July 1, 2026.
- SB338 defines 'precise geolocation data' as information identifying a specific individual's location within a 1,750-foot radius using technology.
Advocates say the measure targets "some of the most harmful abuses of our personal data," according to Caitriona Fitzgerald, Deputy Director of the Electronic Privacy Information Center (EPIC).
Support for the law was broad-based; it passed with unanimous, bipartisan approval at every legislative stage. Consumer rights groups say the statute brings "critical location privacy protections to all Virginians," Consumer Reports' Matt Schwartz noted (press release).
- The law reflects a growing state-level movement as Congress has yet to establish comprehensive federal privacy legislation.
- Businesses handling or selling location data must reassess their compliance programs to align with the new Virginia requirements by July 2026.
While the precise enforcement mechanisms and potential penalties have not been detailed, the law signals heightened scrutiny ahead for data brokers and companies reliant on location data sales.
By the numbers:
- 3 states — Maryland, Oregon, and Virginia now ban sale of precise geolocation data
- 1,750 feet — Definition of 'precise geolocation data' under Virginia's law
- July 1, 2026 — Effective date of Virginia's geolocation data sale ban
Yes, but: The legislation does not specify enforcement mechanisms or penalties, leaving compliance details to future guidance.