VirginiaData brokers; regulation, civil penalties.
What it does
Regulation of data brokers; civil penalties. Prohibits a person from acquiring personally identifiable information, defined in the bill, through fraudulent means or acquiring and using such information for the purpose of (i) stalking or harassing another person; (ii) committing a fraud, including identity theft, financial fraud, or email fraud; or (iii) engaging in unlawful discrimination, including employment discrimination or housing discrimination. The bill requires a data broker, defined in the bill, to develop, implement, and maintain a comprehensive information security program that includes certain features and technical elements.
More detail
The bill also requires a data broker operating in the Commonwealth, beginning on December 1, 2027, and annually thereafter, to register with the Secretary of the Commonwealth. The bill provides that a violation of its provisions constitutes a prohibited practice under the Virginia Consumer Protection Act. The bill has a delayed effective date of July 1, 2027.
Where do you stand?
Choose your position
Tell your reps
Take a position to see your representatives and ways to contact them.
Where it stands
- Introduced
- Passed House
- Passed Senate
- To Governor
- Became Law
Looking ahead
No hearings or votes scheduled.
History
- 2026
- Feb 9Continued to next session in Communications, Technology and Innovation (Voice Vote)Latest
- Feb 4Subcommittee recommends continuing to (Voice Vote)
- Feb 4House subcommittee offered
- Jan 26Assigned HST sub: Technology and InnovationMinor
- Jan 13Referred to Committee on Communications, Technology and InnovationMinor
- Jan 13Prefiled and ordered printed; Offered 01-14-2026 26105301DIntroduced