[dv_dt]

So let's say a Delaware incorporated company sells location data that happens to be collected in Virginia, but its sold from the corporation with no operations in Virginia. What happens? On the other hand us-east-1 is in Virginia with who knows how many payment processing servers running.

[b40d-48b2-979e]

The same thing that happens in court cases across state lines. It goes to one of the jurisdictions in a lawsuit unless it qualifies for diversity jurisdiction and goes to a federal court.

[piker]

Okay I tend to agree with the CivPro analysis here, but the parent was probably more concerned with the result on the merits.

[thephyber]

Most likely the vendor will make a judgement call about whether they care to comply. If they do want to comply, they will likely exempt all Virginia data from the collected data set and contractually require and downstream user to indemnify them if a Virginia person is affected by their data set.

[HoldOnAMinute]

So, they are collecting geolocation data to avoid selling geolocation data.

BRILLIANT

[8note]

from the Youtube kids business, its pretty clear that even when they pretend to not know the details of whos being targeted, they still do, and sell targeted data as such

soo, might as well have the proper details be collected and not sellable, than collected/inferred and still sellable

[spiralpolitik]

If the Delaware company has zero presence in Virginia then the state of Virginia can't do anything about it.

The presence of us-east-1 in Virginia probably will complicate the matter considerably and I'm guessing it's something the courts would need to sort out.

[8note]

whoever collected it in virginia, selling it to the delaware company would be screwed though?

[bitmasher9]

Yeah, someone is at risk of trafficking the gps data out of Virginia initially.