Regulatory Watch  /  United States (federal)  /  New law
Moderate impactNew lawIn effect

Five US states enact location privacy laws banning sale of precise geolocation data

Connecticut, Maryland, New Jersey, Oregon, and Virginia have enacted new consumer privacy statutes that prohibit the sale of precise geolocation data. The laws vary in their consent and minimization requirements, but all share a ban on data sales. None of the statutes provide an explicit private right of action for consumers.

Why it matters: The enactment creates baseline protections for location data while highlighting enforcement gaps that could limit effectiveness.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Privacy on the Map (Part 2): Progress, Pitfalls, and the Fight for Enforceable Location Data Protections
EFF updates · primary source · Aug 31, 2026
Details
JurisdictionUnited States (federal)
RegulatorMD AG
LawMaryland Online Data Privacy Act
StatusIn effect
PublishedAugust 31, 2026
Effectivenot stated
Topicssale, consent, privacy
Datapersonal, location