VA HB1161

Restricts Virginia state agencies and political subdivisions from disseminating personal information to the federal government or other entities except under specific circumstances: compliance with state/federal law, court orders, subpoenas, fulfilling procurement contracts, obtaining the data subject's consent, or accomplishing a proper agency purpose.

Prohibits state agencies and political subdivisions from selling personal information.

Expands the definition of "personal information" to include immigration status, USCIS alien registration numbers, tax identification numbers, national origin, voting history, faceprints, eye retinas, irises, and other biometric identifiers.

Requires agencies to notify data subjects when their personal information may be disseminated to federal agencies, other systems, or private entities, and to disclose the intended use and consequences.

Defines "consent" as a clear, affirmative act signifying freely given, specific, informed, and unambiguous agreement before personal information can be disseminated.