Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.
The OAG will have authority to enforce violations of the new geolocation data protection law through the Virginia Consumer Data Protection Act. No specific remedies are detailed as this is a legislative announcement.
In-house legal teams should review vendor agreements and data processing contracts to ensure compliance with Virginia's new geolocation data protection law (SB388). Specifically, contracts with data brokers, analytics providers, and any vendors that collect or process precise geolocation data should include prohibitions on the sale of such data. Data processing agreements should be updated to restrict the use of geolocation data to only specified, permitted purposes and to require vendors to implement mechanisms for consumers to opt out of the sale of their location data. Additionally, customer-facing privacy policies and consent mechanisms should be reviewed to ensure they clearly disclose geolocation data collection and provide opt-out rights as required by the VCDPA.
Entity
Commonwealth of Virginia Office of the Attorney General
Industry
OtherOfficial Press Release
https://www.oag.state.va.us/media-center/news-releases/3062-attorney-general-jay-jones-prepares-to-enforce-virginias-new-laws
HB21
https://lis.virginia.gov/bill-details/20261/HB21
HB308
https://lis.virginia.gov/bill-details/20261/HB308
HB360
https://lis.virginia.gov/bill-details/20261/HB360
HB6
https://lis.virginia.gov/bill-details/20261/HB6
HB238
https://lis.virginia.gov/bill-details/20261/HB238
HB1022
https://lis.virginia.gov/bill-details/20261/HB1022
HB1262
https://lis.virginia.gov/bill-details/20261/HB1262
SB338
https://lis.virginia.gov/bill-details/20261/SB338
HB1439
https://lis.virginia.gov/bill-details/20261/HB1439
Virginia Attorney General Enforcement Page
https://www.oag.state.va.us/consumer-protection/
"Office of the Attorney General"
"SB388 Consumer Geolocation Data Protection"
"The sale of a Virginian’s precise geolocation information is illegal in the Commonwealth and the OAG will be able to enforce violations through the Virginia Consumer Data Protection Act."
"Published on: July 1, 2026"
"Starting today, the Office of the Attorney General will be empowered with new enforcement authority by a slate of new laws."
$353.0M
Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta, with $353 million guaranteed for Virginia, resolving a child-safety lawsuit brought by a multistate coalition against the social media company. The settlement includes monetary relief and guardrails aimed at protecting children on Meta's platforms.
$17.0B
Meta Platforms, Inc. agreed to a landmark $17 billion multistate settlement resolving claims that it intentionally designed addictive features on Facebook and Instagram that harmed youth mental health, and misled the public about platform safety. Virginia will receive a guaranteed $353 million, and Meta must implement extensive child-safety measures including daily time limits, age verification, and content restrictions.
$2.0M
Attorney General Jones, along with four other states and the FTC, sued Zillow and Redfin for an illegal agreement where Zillow paid Redfin $100 million to exit the multifamily rental advertising market and exclusively display Zillow's listings. The settlement requires the companies to restore competition, pay $2 million, and prohibits future anticompetitive agreements.
Attorney General Jay Jones and a coalition of 21 attorneys general obtained a temporary restraining order blocking the Trump administration from demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers from AAMVA. The lawsuits allege the federal agencies violated federal privacy laws and the Administrative Procedure Act by seeking to acquire the data without guardrails or public notice.
A coalition of 21 attorneys general and the Governor of Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, DHS, and AAMVA to prevent the federal government from obtaining a database of personal information of 17 million commercial driver's license holders. The lawsuits allege the federal government violated federal privacy laws and the Administrative Procedure Act by demanding the data without notice or guardrails, and threatening to withhold $10 million in federal funding if AAMVA refused.
Attorney General Jay Jones announced the creation of the Regulated Products Enforcement Unit to centralize civil enforcement for liquid nicotine products, THC and hemp-derived products, kratom, and related intoxicants. The unit will oversee compliance, directory administration, and public education. It will coordinate with Virginia ABC and other agencies to take legal action against violators.