Home › Intelligence › Brief
BREACH BRIEF🟠 High Advisory

Federal Appeals Court Invalidates West Virginia Law Restricting Public Officials’ Personal Data Disclosure

A federal appeals court struck down West Virginia’s law that barred data brokers from publishing personal information about public officials, citing unconstitutional content‑based restrictions. Organizations must reassess consent and notice controls to stay audit‑ready under privacy frameworks.

LiveThreat™ Intelligence · 📅 October 29, 2026· 📰 therecord.media
🟠
Severity
High
AD
Type
Advisory
🎯
Confidence
High
🏢
Affected
3 sector(s)
✅
Actions
2 recommended
📰
Source
therecord.media

Federal Appeals Court Invalidates West Virginia Law Restricting Public Officials’ Personal Data Disclosure

What Happened — The 4th U.S. Circuit Court of Appeals upheld a lower‑court ruling that strikes down West Virginia’s version of “Daniel’s Law,” a statute that barred data‑broker services from publishing personal information (addresses, phone numbers) of law‑enforcement officers, judges and other public officials without prior permission. The court found the law to be an unconstitutional content‑based restriction on speech and to impose an overly broad liability standard on data brokers. The decision not only clears the specific class‑action lawsuit involving WhitePages, Thomson Reuters, LexisNexis and PeopleConnect, but also removes the statutory barrier that had limited the sharing of public‑officials’ data across the state.

Why It Matters for Trust & Control Assurance — The ruling highlights the need for robust privacy‑governance controls around consent, notice and lawful basis for processing personal data, especially when dealing with third‑party data‑broker services.

Who Is Affected — Data‑broker platforms, public‑sector agencies, and any organization that aggregates or distributes personal information about public officials.

Recommended Actions

  • Review and update privacy policies to ensure explicit consent and proper notice before collecting or sharing personal data of public officials.
  • Conduct a gap analysis of third‑party data‑broker contracts against privacy‑framework requirements (e.g., GDPR, CCPA) and document lawful bases for processing.

Technical Notes – The law required data brokers to obtain permission from officials before publishing their data and allowed private lawsuits up to $1,000 per violation plus punitive damages. The appellate decision emphasizes that the statute’s lack of a prior‑notice requirement and its content‑based speech restriction are unconstitutional. Source: https://therecord.media/west-virginia-daniels-law-struck-down-appellate-court

📰 Original Source
https://therecord.media/west-virginia-daniels-law-struck-down-appellate-court ↗

This LiveThreat Intelligence Brief is an independent analysis. Read the original reporting at the link above.

From the Verisq platform · PrivacyOps · CookiePLUS

Data exposure is where consent and DSAR readiness get tested.

When personal data leaks, regulators ask what consent you held and how fast you can answer a subject request. The Verisq AI Trust Operations platform, with CookiePLUS, keeps that posture audit-ready under GDPR and CCPA.

Explore the Verisq AI Trust Operations platform →