A BILL to amend and reenact § 59.1-200 of the Code of Virginia and to amend the Code of Virginia by adding in Chapter 44 of Title 59.1 an article numbered 2, consisting of sections numbered 59.1-518.02 through 59.1-518.06, relating to Virginia Telephone Privacy Protection Act; voice service providers; duty of care; caller identification authentication; civil penalties.
HB743 would create the Virginia Telephone Privacy Protection Act and expand Virginia’s consumer protection law to address robocalls, caller ID spoofing, and related unlawful telephone activity. The bill adds a new article in Title 59.1 that defines “voice service provider,” “voice service,” and “unlawful calls,” and requires providers to take reasonable and effective measures to prevent the origination, transmission, and completion of unlawful calls. It also requires implementation of caller ID authentication consistent with the STIR/SHAKEN framework on internet protocol networks, and functionally equivalent authentication or mitigation measures on non-IP networks where technically feasible.
The bill also imposes record-retention obligations for providers, including retaining authentication records, call detail records, traceback requests, and mitigation actions for at least three years. A provider could be deemed in violation without proof of intent or knowledge if it transmits spoofed or invalid-number calls when it has the ability to detect or block them, fails to authenticate calls when capable, ignores traceback or enforcement notices, fails to follow its robocall mitigation plan, or fails to block anomalous calling campaigns. Violations would be treated as prohibited practices under the Virginia Consumer Protection Act, allowing enforcement under that statute, and the bill also provides for joint and several liability for providers materially participating in unlawful calls.
In addition to the new telephone-privacy provisions, HB743 amends the list of prohibited practices in § 59.1-200 by adding violations of the new article to the existing consumer-protection framework. The bill also makes a broad set of technical and policy updates to the prohibited-practices list, but its central legal effect is to give the Commonwealth a state-law enforcement mechanism against robocalls and caller-ID spoofing, including civil penalties and consumer-protection remedies. It would apply to originating, intermediate, and terminating voice service providers serving consumers or subscribers in Virginia.
The overall sentiment reflected in the bill materials is protective and enforcement-oriented, with the measure framed as a consumer privacy and anti-fraud bill. There were no committee transcripts or recorded votes provided, so there is no direct evidence of debate or opposition in the supplied materials. The fact that the bill was left in the Communications, Technology and Innovation Committee suggests it did not advance, but the text itself indicates a strong policy preference for aggressive robocall mitigation and provider accountability.
The main point of contention likely concerns the scope of provider liability and compliance burden. The bill imposes affirmative duties, mandatory authentication, extensive record retention, and liability even without proof of intent or knowledge, and it states that compliance with federal law is not a safe harbor. Those provisions could be viewed as especially burdensome by voice service providers, carriers, and telecom intermediaries, while consumer advocates would likely support the stronger protections against spoofed and unlawful calls.
HB743 would amend § 59.1-200 of the Code of Virginia to add violations of the new telephone-privacy article as prohibited consumer practices under the Virginia Consumer Protection Act, and it would create new Code sections §§ 59.1-518.02 through 59.1-518.06. The bill would impose new duties on voice service providers to authenticate calls using STIR/SHAKEN or equivalent measures, retain compliance records, and take reasonable steps to block or mitigate unlawful calls, while exposing providers to civil enforcement, joint and several liability, and consumer-protection remedies for noncompliance.
The bill appears to be driven by a pro-consumer, anti-robocall sentiment, with the text emphasizing privacy protection, caller ID authentication, and stronger enforcement against deceptive calling practices. No committee discussion or vote record was provided, so there is no documented floor or committee opposition in the supplied materials. The bill’s placement in committee without further action suggests it did not advance, but the policy direction is clearly supportive of stronger telephone privacy protections.
The most notable contention is likely over the breadth of the new obligations placed on voice service providers. The bill would require affirmative preventive measures, detailed record retention, and compliance with STIR/SHAKEN or equivalent authentication, and it would impose liability even without proof of intent or knowledge. Providers and intermediaries may object to the operational and legal burden, especially the joint-and-several-liability provision and the statement that federal compliance is not a safe harbor. Consumer advocates, by contrast, would likely support these provisions as necessary to curb spoofing and unlawful robocalls.