Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.
The OAG will have authority to enforce violations of the new geolocation data protection law through the Virginia Consumer Data Protection Act. No specific remedies are detailed as this is a legislative announcement.
In-house legal teams should review vendor agreements and data processing contracts to ensure compliance with Virginia's new geolocation data protection law (SB388). Specifically, contracts with data brokers, analytics providers, and any vendors that collect or process precise geolocation data should include prohibitions on the sale of such data. Data processing agreements should be updated to restrict the use of geolocation data to only specified, permitted purposes and to require vendors to implement mechanisms for consumers to opt out of the sale of their location data. Additionally, customer-facing privacy policies and consent mechanisms should be reviewed to ensure they clearly disclose geolocation data collection and provide opt-out rights as required by the VCDPA.
Entity
Commonwealth of Virginia Office of the Attorney General
Industry
OtherOfficial Press Release
https://www.oag.state.va.us/media-center/news-releases/3062-attorney-general-jay-jones-prepares-to-enforce-virginias-new-laws
HB21
https://lis.virginia.gov/bill-details/20261/HB21
HB308
https://lis.virginia.gov/bill-details/20261/HB308
HB360
https://lis.virginia.gov/bill-details/20261/HB360
HB6
https://lis.virginia.gov/bill-details/20261/HB6
HB238
https://lis.virginia.gov/bill-details/20261/HB238
HB1022
https://lis.virginia.gov/bill-details/20261/HB1022
HB1262
https://lis.virginia.gov/bill-details/20261/HB1262
SB338
https://lis.virginia.gov/bill-details/20261/SB338
HB1439
https://lis.virginia.gov/bill-details/20261/HB1439
Virginia Attorney General Enforcement Page
https://www.oag.state.va.us/consumer-protection/
"Office of the Attorney General"
"SB388 Consumer Geolocation Data Protection"
"The sale of a Virginian’s precise geolocation information is illegal in the Commonwealth and the OAG will be able to enforce violations through the Virginia Consumer Data Protection Act."
"Published on: July 1, 2026"
"Starting today, the Office of the Attorney General will be empowered with new enforcement authority by a slate of new laws."
$663K
Attorney General Jay Jones joined 42 attorneys general in a multistate settlement with 23andMe's bankruptcy trustee over a 2023 data breach that compromised genetic data of nearly 7 million customers. The settlement includes $150 million in allowed claims, with immediate recovery of $18 million from bankruptcy funds, of which Virginia receives $662,649. The settlement also requires enhanced data security measures and consumer protections for the new entity, 23andMe Research Institute.
$45.0M
Block, Inc., the parent company of Cash App, agreed to a $45 million multistate settlement with 46 states for misleading consumers about the safety of Cash App and failing to protect users from fraud. The settlement requires Block to improve customer support, stop deceptive marketing, and fulfill legal obligations to investigate fraud and reimburse unauthorized transactions.
The Virginia Attorney General, as part of a multistate coalition, secured a court ruling allowing their case against Meta to proceed to trial. The case alleges that Meta designed and deployed harmful features on its platforms that addict children and teens, causing severe mental and physical detriment. The trial is scheduled for August.
The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.
A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.
Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.