Court Rules
All enforcement actions
New LawLow Risk

Virginia Attorney General Prepares to Enforce New Consumer Protection Laws Including Geolocation Data Protection

Commonwealth of Virginia Office of the Attorney GeneralJuly 1, 2026Virginia Attorney General

Summary

Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.

Remedy

The OAG will have authority to enforce violations of the new geolocation data protection law through the Virginia Consumer Data Protection Act. No specific remedies are detailed as this is a legislative announcement.

Injunction

Contract Impact

In-house legal teams should review vendor agreements and data processing contracts to ensure compliance with Virginia's new geolocation data protection law (SB388). Specifically, contracts with data brokers, analytics providers, and any vendors that collect or process precise geolocation data should include prohibitions on the sale of such data. Data processing agreements should be updated to restrict the use of geolocation data to only specified, permitted purposes and to require vendors to implement mechanisms for consumers to opt out of the sale of their location data. Additionally, customer-facing privacy policies and consent mechanisms should be reviewed to ensure they clearly disclose geolocation data collection and provide opt-out rights as required by the VCDPA.

Contract Search Terms

geolocation dataprecise location datadata sale prohibitionVirginia Consumer Data Protection ActVCDPA complianceconsumer data protectionlocation data sharingopt-out of saledata processing agreementconsumer privacy rights

Laws Cited

Virginia Consumer Data Protection Act (VCDPA)Virginia Consumer Protection Act (VCPA)HB21/SB72 Firearm Industry AccountabilityHB 308/SB 620 Vape Enforcement ActHB360 Kratom Consumer ProtectionsHB6/SB596 Right to ContraceptionHB238 Wage Theft ProtectionsHB1022/SB493 Click-to-CancelHB1272 Notario FraudSB388 Consumer Geolocation Data ProtectionHB 1439/SB 823 Solar Consumer Protection
SB388

Violation Types

Entity Details

Entity

Commonwealth of Virginia Office of the Attorney General

Industry

Other

Official Sources

Source Evidence

Entity Name
"Office of the Attorney General"
Laws Cited
"SB388 Consumer Geolocation Data Protection"
Violation Types
"The sale of a Virginian’s precise geolocation information is illegal in the Commonwealth and the OAG will be able to enforce violations through the Virginia Consumer Data Protection Act."
Event Date
"Published on: July 1, 2026"
Summary
"Starting today, the Office of the Attorney General will be empowered with new enforcement authority by a slate of new laws."

Related Enforcement Actions

VA

U.S. Department of Homeland Security (DHS)

Virginia Attorney General Jay Jones joined a coalition of 21 attorneys general in opposing a DHS rule that allows certain affirmative asylum applications to be referred to immigration court without an asylum officer interview. The coalition argues the rule violates federal law, harms asylum applicants, and bypasses notice-and-comment requirements; the release describes a comment letter, not a privacy enforcement action or monetary penalty.

VA

U.S. Department of Homeland Security’s Citizenship and Immigration Services (USCIS)

Virginia Attorney General Jay Jones joined 22 attorneys general in a comment letter opposing a proposed USCIS rule that would impose a $103,265 tax on certain H-1B petitions. The coalition urged USCIS to withdraw the proposal, arguing it exceeds the agency’s authority, harms state staffing, and violates rulemaking requirements.

VA

Trump Administration

A federal judge permanently blocked the Trump administration from penalizing states over SNAP administration and struck down guidance restricting food assistance for certain lawful permanent residents. The release does not state the date of the court’s ruling, so the event date uses the publication date as a proxy.

VA

Coalition of 24 Attorneys General

Attorney General Jay Jones joined a coalition of 24 attorneys general in filing a comment letter opposing a proposed CMS rule that the coalition says oversteps federal law, could put Medicaid funding at risk, and interfere with state regulation of health insurance. The coalition urges CMS to withdraw or significantly revise the proposed rule.

VA

U.S. Department of Transportation

Attorney General Jay Jones and a coalition of 24 attorneys general obtained a preliminary injunction blocking the Trump administration from demanding a database of state-owned records containing personal information of 17 million CDL drivers from AAMVA and from terminating over $10 million in federal funding. The lawsuits allege DOT, FMCSA, and DHS violated federal privacy laws by secretly creating a database with no guardrails on use or sharing of Social Security numbers and no public notice.

VA

No respondent entity (consumer advisory announcement)

Virginia Attorney General Jay Jones announced that Governor Spanberger's declaration of a state of emergency due to prolonged, severe drought has triggered Virginia's anti-price gouging statutes, making it unlawful to charge unconscionable prices for necessary goods and services. A price is unconscionable if it grossly exceeds the price charged during the ten days immediately prior to the emergency. No entity was charged or fined; the release is a consumer advisory explaining how to report suspected price gouging to the Attorney General's Consumer Protection Section.