Data Privacy legislation in Virginia

Every bill in the Virginia Legislature that falls inside the Data Privacy Legislation Tracker's scope, with where each one currently stands.

27

Bills in Scope

10

Past Committee

13 April 2026

Most Recent Action

Data Privacy bills in Virginia

7Enacted

3Past committee

17Introduced or inactive

27 bills in scope

Introduced or inactive

15 of 17 shown

HB 654Consumer Data Protection Act; definition of "biometric data"; consent required for processing.In committeeHB 638Data brokers; regulation, civil penalties.In committeeSB 201Consumer Data Protection Act; protections for children, definitions.DeadSB 615Consumer Data Protection Act; online device pricing, prohibition.In committeeHB 2433Law-enforcement agencies; use of certain technologies and interrogation practices.In committeeSB 1440Consumer data privacy; automakers, civil penalty.In committeeSB 769Consumer Data Protection Act; controller privacy notice; cookies; consumer consent.In committeeHB 1624Consumer Data Protection Act; social media platforms; addictive feed prohibited for minors.In committeeHB 1817Consumer Data Protection Act; social media, parental consent.In committeeHB 2043Consumer Data Protection Act; user-generated content protected, civil penalty.In committeeHB 2250Artificial Intelligence Training Data Transparency Act; transparency and disclosure requirements.In committeeHB 2465Va. Ed. & Workforce Data Governing Board & Office of Va. Education & Workforce Data; established.In committeeSB 783Consumer Data Protection Act; protections for children.In committeeHB 1648Office of Data Governance and Analytics; oversight; Chief Data Officer; duties.In committeeSB 252Consumer Data Protection Act; controller privacy notice, consumer consent.In committee

Showing the 25 furthest along of 27. Subscribers see all of them, filtered and searchable. Bill titles link to the Virginia Legislature's own page.

Coverage depth varies by jurisdiction. How this is measured, and where it is thinner.

What's In Scope

How Data Privacy Legislation bills are selected

In scope is any bill creating or amending duties over personal information: consumer rights of access, deletion, correction and opt-out; sale and sharing definitions; sensitive and biometric identifiers; breach notification timing and content; data broker registration; and the exemptions and thresholds that decide who is covered at all.

Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.

Virginia is one of Data Privacy Legislation's jurisdictions

The tracker follows this subject everywhere it is legislated, and publishes a monthly issue on what moved across all of them.