Jurisdiction

Virginia privacy and AI laws

Regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Virginia VCDPAThe second US comprehensive state privacy law: access, correction, deletion, portability and opt-out rights (targeted ads, sale, profiling), opt-in consent for sensitive data and data protection assessments. SB 854 (2025) added a 1-hour-per-day default social media limit for users under 16, effective Jan 1, 2026, but a federal court has preliminarily enjoined it. SB 338 (2026) bans selling precise geolocation data from July 1, 2026.In effect since Jan 1, 2023

Past deadlines

Takes effectJul 1 · 4 months ago · Source

Ban on selling precise geolocation data (SB 338)Controllers may not sell consumers' precise geolocation data (1,750-ft radius), replacing the prior consent-based treatment.

MilestoneFeb 27 · 8 months ago · Source

SB 854 preliminarily enjoined (NetChoice v. Jones)E.D. Va. preliminarily enjoined enforcement of the SB 854 social media time-limit provisions on First Amendment grounds; Virginia has appealed.

Takes effectJan 1 · 10 months ago · Source

Under-16 social media time limit (SB 854) takes effectSocial media platforms must use commercially reasonable age determination and cap users under 16 at 1 hour/day unless a parent consents. A preliminary injunction issued Feb 27, 2026 bars enforcement.

Takes effectJan 1, 2023 · 3.8 years ago · Source

VCDPA takes effectVCDPA obligations and consumer rights apply.