West Virginia Daniel’s Law Struck Down: Implications for Data Brokers and Public Officials

What Happened

A federal appellate court in Richmond, Virginia, declared West Virginia’s law designed to protect police officers, judges, and other public officials from the publication of their personal addresses and phone numbers unconstitutional. The 4th Circuit affirmed a lower court’s August 2025 ruling that the state’s version of Daniel’s Law was a content‑based restriction on speech and imposed overly broad liability on data brokers.

The court noted that the statute required data brokers to obtain permission from officials before publishing personal data that could expose them to harassment or harm, and allowed lawsuits for up to $1,000 per violation plus punitive damages. By striking the law down, the court removed the statutory barrier that had previously forced data brokers to seek consent and to prove that the data was being distributed unlawfully.

Who Is Affected

Public officials in West Virginia, including law enforcement officers, prosecutors, judges, and public defenders, were the primary beneficiaries of the law. The ruling directly impacts their ability to control the dissemination of their personal information and the legal recourse they could pursue against data brokers.

Data brokers such as WhitePages, Thomson Reuters, LexisNexis, and PeopleConnect, which had been sued under the law, now have a clearer legal position. The decision also affects any organization that aggregates or sells personal data, as it removes a state‑level constraint that had limited their operations.

Impact

The ruling is a significant win for data brokers, who had faced increasing litigation over their data‑collection practices. By invalidating the West Virginia law, the court has removed a precedent that could have been cited in other states to challenge data broker activities.

For defenders, the decision signals that state‑level privacy statutes may not provide robust protection against the exposure of personal data. It underscores the need for organizations to rely on federal privacy frameworks and contractual controls rather than state laws that may be vulnerable to constitutional challenges.

Exposure

Public officials’ personal data—addresses, phone numbers, and other contact details—has historically been available through people‑search services. The West Virginia law had limited the distribution of such data, but the ruling removes that restriction. As a result, the potential for personal data exposure has increased, especially through third‑party data brokers that aggregate public records.

Defenders should be aware that the removal of the law may lead to a surge in data broker listings of public officials. This can increase the risk of harassment, doxxing, or targeted phishing attacks against officials and their families.

What to Do

• Audit all personal data that is publicly available for public officials within your organization’s network and assess the risk of exposure.
• Implement data minimization policies to limit the collection and retention of personal contact information for public officials.
• Establish monitoring procedures to detect when personal data appears on data broker platforms and trigger incident response if necessary.
• Review and update privacy and data‑handling contracts with third‑party vendors to ensure they comply with federal privacy requirements and do not inadvertently facilitate unlawful data distribution.
• Educate staff and public officials on best practices for protecting personal information, including the use of secure communication channels and the importance of keeping personal data off public directories.

What to Watch

The decision could influence ongoing litigation in other states, such as New Jersey, where similar Daniel’s Law statutes are under challenge. Defenders should monitor court filings in those jurisdictions for potential changes that may either reinforce or weaken data broker liability.

Additionally, the ruling may prompt lawmakers to draft new privacy statutes that avoid content‑based restrictions, potentially creating a patchwork of state laws. Organizations should stay informed about legislative developments and consider advocating for uniform federal privacy standards to reduce legal uncertainty.