Bill > SB1023

This bill amends the Virginia Consumer Data Protection Act to add a new requirement for data controllers regarding precise geolocation data. Specifically, the bill prohibits data controllers from selling or offering for sale precise geolocation data concerning a consumer. This means companies that collect personal data cannot monetize a person's exact location information. The bill builds upon existing provisions that already require data controllers to: limit data collection to what is necessary, protect consumer data through reasonable security practices, avoid discriminatory data processing, obtain consent for processing sensitive data, and provide clear privacy notices to consumers. The new provision specifically adds protection around location data, which can be particularly sensitive as it reveals a person's physical movements and potentially private information. The bill continues to emphasize consumer rights and transparency in data handling, ensuring that individuals have more control over how their personal information is used and shared by companies collecting their data.

Business and Industry, Justice

https://lis.virginia.gov/bill-details/20251/SB1023