What counts as precise geolocation under privacy law?

Last reviewed 20 October 2026

U.S. state privacy laws define precise geolocation by radius: in California it is device data that locates a person within a circle of 1,850 feet, and in Virginia within 1,750 feet, and both treat it as sensitive personal information with extra obligations.

Two definitions

“Precise geolocation” means any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet, except as prescribed by regulations.

“Precise geolocation data” means information derived from technology, including but not limited to global positioning system level latitude and longitude coordinates or other mechanisms, that directly identifies the specific location of a natural person with precision and accuracy within a radius of 1,750 feet.

Other state laws use similar radius tests. Check the statute for each state you operate in.

Why it matters for location checks

A compliance check that collects GPS coordinates collects precise geolocation, and with it the duties that come with sensitive data: notice, consent or opt-out rights, limits on use, and security. Most rules do not require that cost. They only ask whether someone is inside a region.

A verdict instead of a location

When the device answers “inside New Jersey: yes” and keeps the coordinates, what reaches your servers is a signed yes or no about a region, not a position within 1,850 feet. Whether that falls outside a given statute is a legal question for counsel, but it is far less data to hold. See how to verify location without collecting it.

Nothing here is legal advice.