Limits How Data Brokers Collect and Use Data
Virginia · HB638 · Introduced Jan 13, 2026
Why it matters
People whose personal data is sold by brokers would get new protections against misuse. Brokers would face civil penalties for breaking these rules.
What it does
- Bans getting personal information through fraudulent means
- Bans using personal data for stalking, harassment, fraud, or illegal discrimination
- Requires data brokers to keep a written security program to protect personal information
- Requires data brokers to report security breaches involving more than one piece of personal information
Status
Latest action (2026-07-21): Continued from last session
About this bill
Would ban getting personal data by fraud or using it to stalk, scam, or discriminate. Data brokers would need a security program and must register with the state starting December 1, 2027.
Data brokers; regulation, civil penalties.
Perspectives
💬 The case for
Privacy groups would likely say the bill stops people from being tracked and harmed by stolen data. It would require brokers to protect the data they hold.
💬 The case against
Some data companies would likely say the rules are too broad and costly to follow. They may also argue the bill could limit lawful information sharing.
Sponsored by
Sponsor details for this state bill are at the source link.
News
Loading coverage…