Last fall I spoke at the IAPP Privacy. Security. Risk. conference about the intersection of privacy and geolocation data. The timing could not have been more prescient as, for the first time ever, a state-level privacy (Connecticut, Virginia, California Privacy Rights Act) law had officially declared geolocation data as “sensitive.”

Since then, a variety of state-level privacy laws have also declared some version of the words “precise location data” to be sensitive. Equally important, the U.S. Congress has upped the ante on this trend with the current draft of the American Data Privacy and Protection Act also declaring location data to be sensitive and places near-draconian restrictions on third-party data processing of this data.