:

VIRGINIA BANS SALE OF GEOLOCATION DATA

INDUSTRY DESK1 MIN READ
THU, JUL 2, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Virginia has enacted legislation prohibiting the sale of geolocation data without explicit consumer consent. The law marks another state-level privacy measure targeting the commercial tracking industry.

Virginia's ban restricts companies from selling precise location information derived from mobile devices, apps, and digital services. Consumers must provide affirmative consent before their geolocation data can be transferred or sold to third parties. The legislation adds to Virginia's existing privacy framework, which already includes the Virginia Consumer Data Protection Act (VCDPA). Privacy advocates view the measure as necessary protection against widespread location tracking by data brokers and advertisers. Companies handling geolocation data will need to update consent mechanisms and data handling practices to comply. The law applies to businesses collecting location information from Virginia residents, regardless of company location. Other states including California and Colorado have implemented similar restrictions on geolocation data sales. The patchwork of state-level privacy laws continues to push federal privacy legislation discussions in Congress.

■ SOURCES

Hacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

3H AGOIndustry Desk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

3H AGOSecurity Desk

Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.

6H AGOAI Desk

A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.

9H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.