HB 638 VA

0likes☆Favorite🔕SubscribeShare

Introduced

Regulation of data brokers; civil penalties. Prohibits a person from acquiring personally identifiable information, defined in the bill, through fraudulent means or acquiring and using such information for the purpose of (i) stalking or harassing another person; (ii) committing a fraud, including identity theft, financial fraud, or email fraud; or (iii) engaging in unlawful discrimination, including employment discrimination or housing discrimination. The bill requires a data broker, defined in the bill, to develop, implement, and maintain a comprehensive information security program that includes certain features and technical elements. The bill also requires a data broker operating in the Commonwealth, beginning on December 1, 2027, and annually thereafter, to register with the Secretary of the Commonwealth. The bill provides that a violation of its provisions constitutes a prohibited practice under the Virginia Consumer Protection Act. The bill has a delayed effective date of July 1, 2027.

• Michelle Lopes Maldonado · primary

1. Jan 13, 2026 Prefiled and ordered printed; Offered 01-14-2026 26105301D · lower
2. Jan 13, 2026 Referred to Committee on Communications, Technology and Innovation · lower
3. Jan 26, 2026 Assigned HST sub: Technology and Innovation · lower
4. Feb 4, 2026 House subcommittee offered · lower
5. Feb 4, 2026 Subcommittee recommends continuing to (Voice Vote) · lower
6. Feb 9, 2026 Continued to next session in Communications, Technology and Innovation (Voice Vote) · lower

The published texts of this bill as it moves through the legislature. Each links to the official document on the state legislature site. Data from OpenStates.

• Communications, Technology and Innovation Substitute · PDF
• Communications, Technology and Innovation Substitute · HTML
• Introduced · PDF
• Introduced · HTML