Virginia just banned selling your location data — with a loophole you could drive a Flock truck through
As of July 1, it is illegal in Virginia to sell precise geolocation data. But the state's privacy law defines 'sale' as an exchange for money — so give the data away and charge for the hardware, and you may be clear.
The ban amends Virginia's Consumer Data Protection Act and took effect this week, joining Maryland and Oregon. It targets a real harm: location feeds have already been used to track visitors to hundreds of Planned Parenthood clinics for an anti-abortion ad campaign.
The thread's privacy lawyers zeroed in on the wording. Maryland and Oregon ban exchanges for 'monetary or other valuable consideration'; Virginia only says 'monetary.' That one missing clause is exactly the gap the license-plate-camera firms already live in — sell the cameras, hand over the dashboard 'for free.'
What Virginia actually banned, and the word that narrows it
A Hunton privacy-law post reports that Virginia has amended its Consumer Data Protection Act (VCDPA) to prohibit the sale of precise geolocation data. The bill was signed by Governor Abigail Spanberger in April and took effect July 1, 2026, putting Virginia alongside Maryland and Oregon, with California, Massachusetts, Vermont and Washington State weighing similar measures. It follows the California attorney general's 2025 probe of the location-data industry and a 2024 FTC settlement barring a broker from selling geolocation data.
The catch is definitional. Virginia's VCDPA defines a "sale" narrowly, as the exchange of personal data "for monetary consideration." Maryland and Oregon use the broader "monetary or other valuable consideration." That missing clause means a barter or non-cash data exchange may fall outside Virginia's ban entirely. (One wrinkle for anyone checking the record: the blog cites the bill as S.B. 388, while the top comment links Virginia's system as SB338 — worth confirming before quoting a number.)
The thread found the exit before the ink dried
Readers who work near this law spotted the workaround immediately, and named the company already running the play:
"instead you buy a "custom computer", and the data is completely free! Its like how FLOCK gets around pesky data laws. The devices coat a lot, but the software dashboard access is "Completely free*"" — a commenter describing Flock's hardware-plus-free-dashboard model
Others argued the fix isn't a broader "everything is a sale" definition, which sweeps in benign first-party use, but a sharper aim at the actual bad actors:
"I have no issues with Google using its first-party Google Maps data to serve me better recommendations. I have massive issues with AT&T selling aggregated geolocation data that makes it easy to identify individuals to third parties." — a reader drawing the first-party-vs-broker line
Lest the stakes read as theoretical, one reader dropped the reason this class of law exists at all:
"A company allegedly tracked people's visits to nearly 600 Planned Parenthood locations across 48 states and provided that data for one of the largest anti-abortion ad campaigns in the nation" — a commenter citing a 2024 investigation
So the win is real and the timing matters — but a ban on "sale" that stops at cash is a ban on the least creative version of the business. The brokers Virginians most want stopped are the ones best equipped to restructure the invoice.
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
PeerTube can serve a video to thousands without a big server. The thread explained why that still isn't YouTube
PeerTube's trick is that everyone watching the same video shares the stream with each other, in the browser, so a modest server doesn't buckle under a crowd. What it does not do is the part that actually keeps creators on YouTube.