Virginia CDPA 59.1-578 A 6: Ban on selling precise geolocation data

Controllers may not sell or offer to sell precise geolocation data about a consumer, whatever consent is obtained. Status: added by 2026 c. 820 (SB 338), in force 1 July 2026, replacing reliance on opt-in consent for such sales.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Controller duties and transparency (59.1-578) – Virginia CDPA

59.1-578 A 1 Data minimisation
59.1-578 A 2 Purpose limitation
59.1-578 A 3 Reasonable data security
59.1-578 A 4 Non-discrimination
59.1-578 A 5 Consent for sensitive data
59.1-578 C Privacy notice
59.1-578 D Disclosure of sale and targeted advertising
59.1-578 E Secure means to submit requests

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Virginia CDPA controls