Five US states enact location privacy laws banning sale of precise geolocation data

What happened

Connecticut, Maryland, New Jersey, Oregon, and Virginia have enacted new consumer privacy statutes that prohibit the sale of precise geolocation data. The laws vary in their consent and minimization requirements, but all share a ban on data sales. None of the statutes provide an explicit private right of action for consumers.

Why it matters for trust and compliance

• Its status is in effect. It is in force now.
• The enactment creates baseline protections for location data while highlighting enforcement gaps that could limit effectiveness.
• It relates to MODPA. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Inventory where this data is shared or sold and whether opt-outs are honoured.