WeVote
Log In

Bill

Bill

HB 638

Data brokers; regulation, civil penalties.

2026 Regular Session Introduced by Bonita Anthony and 2 co-sponsors

Virginia bill creates regulatory framework and civil penalties for data brokers to control personal information collection, aggregation, and sales practices.

Continued to next session in Communications, Technology and Innovation (Voice Vote)
0
WeVote Research Nonpartisan
Bill Summary · HB 638

Legislative bill overview

HB 638 establishes regulatory requirements for data brokers operating in Virginia and creates a civil penalty framework for violations. The bill aims to control how companies that collect, aggregate, and sell personal information conduct their business within the state.

Why is this important

Data brokers operate largely in the shadows, buying and selling detailed personal information about millions of Americans without their knowledge or consent. This bill attempts to bring transparency and accountability to an industry that directly affects consumer privacy, financial security, and vulnerability to identity theft and fraud.

Potential points of contention

  • Business impact: Data broker companies and their clients may argue compliance costs are excessive and could reduce legitimate commercial data services
  • Definition scope: Determining what qualifies as a "data broker" versus legitimate business data collection is technically complex and could create unintended loopholes or overreach
  • Enforcement capacity: Questions about whether Virginia has adequate resources to investigate violations and whether civil penalties are sufficient deterrent versus business operating costs
  • Interstate complications: Data brokers operate nationally, so Virginia-only regulation may be ineffective or create conflicting requirements across state lines

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.