Geolocation Data
What is Geolocation Data?
Data indicating the real-world geographic location of a device or individual, classified as personal data under most privacy regulations.
Terms that appear alongside geolocation data
Each of these is named in at least one of the same controls as geolocation data. The number is how many controls name both.
- biometric data 11 shared controls
- consent 10 shared controls
- opt in consent 6 shared controls
- ferpa 5 shared controls
- ccpa 4 shared controls
- data protection 3 shared controls
- hipaa 3 shared controls
- genetic data 3 shared controls
Frameworks that govern geolocation data
What the standards actually require on geolocation data
Requirements naming geolocation data across 6 standards, quoted from the control text.
Precise geolocation data (radius of 1,750 feet or less) is sensitive personal data requiring opt-in consent before processing.
TDPSA-541-101-GEO · Precise Geolocation Data →Per Iowa Code 715D.5-7 ICDPA imposes heightened obligations for sensitive data + children + de-identification. Unique among US state privacy laws Iowa CDPA requires NOTICE + OPT-OUT for sensitive data processing rather than OPT-IN CONSENT (other states VCDPA/C...
ICDPA-SensitiveData-Notice-OptOut-NotConsent-Children-COPPA-Alignment-De-Identification · Iowa CDPA Sensitive Data + Notice + Opt-Out (NOT Consent unlike VCDPA) + Children Under 13 + COPPA Alignment + De-Identification Standards + Heightened Risk Awareness →Section 4(4)(a) of Kentucky CDPA establishes the heightened consent requirement for sensitive data processing. (1) Section 2 Sensitive Data Definition - 8 Categories: (a) Racial or ethnic origin; (b) Religious beliefs; (c) Mental or physical health diagnosis;
KY-CDPA-Sensitive-Data-Affirmative-Consent-Race-Religious-Health-Genetic-Biometric-Children-Citizenship · Kentucky CDPA Sensitive Data + Affirmative Consent + Race/Ethnicity + Religious + Mental/Physical Health + Sexual Orientation + Citizenship/Immigration + Genetic + Biometric + Children's Data + Precise Geolocation (1,750 ft) + Section 4 Heightened Consent Standard →Per IC 24-15-4 and IC 24-15-5 INCDPA imposes heightened obligations for sensitive data + children + and high-risk processing activities.
INCDPA-SensitiveData-Children-Consent-COPPA-DataProtectionAssessment-DPIA · Indiana CDPA Sensitive Data + Consent for Sensitive Categories + Children Under 13 + COPPA Coordination + Data Protection Assessment (DPA) + High-Risk Processing →Recognise Universal Opt-Out Mechanism (Global Privacy Control GPC) mandatory from 31 July 2025 + process sensitive data and consumer health data under enhanced conditions.
MN-CDPA-Universal-Opt-Out-GPC-Sensitive-Data-Section-325O-02-Consumer-Health-Data-Children-Known-Child-Transgender · Minnesota CDPA Universal Opt-Out + GPC + Sensitive + Section 325O.02 + Consumer Health Data + Children + Known Child + Transgender →Process sensitive data and minor data under enhanced conditions in MCA 30-14-2802 + 30-14-2810. Sensitive Data definition: racial or ethnic origin + religious beliefs + mental or physical health condition or diagnosis + sex life or sexual orientation + citizen...
MT-CDPA-Sensitive-Data-MCA-30-14-2802-Opt-In-Children-13-Parental-Consent-Minors-13-16-Opt-In · Montana CDPA Sensitive Data + MCA 30-14-2802 + Affirmative Opt-In + Children Under 13 Parental + Minors 13-16 Opt-In →Questions people ask about geolocation data
What is Geolocation Data?
Why is Geolocation Data important for compliance?
Which compliance frameworks address Geolocation Data?
Where can I learn more about Geolocation Data?
See how Geolocation Data applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.