Virginia Consumer Data Protection Act, controller duties (sensitive data consent; no sale of precise geolocation) (Va. Code 59.1-578(A)(5)-(6))
Health, biometric, precise location, children's and similar sensitive data cannot be processed (including disclosed for AI training) without the consumer's opt-in consent. The Code as now published (history note citing 2026, c. 820) also bars selling precise geolocation data outright.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“5. Not process sensitive data concerning a consumer without obtaining the consumer's consent ... 6. Not sell or offer for sale precise geolocation data concerning a consumer.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide