Most likely the vendor will make a judgement call about whether they care to comply. If they do want to comply, they will likely exempt all Virginia data from the collected data set and contractually require and downstream user to indemnify them if a Virginia person is affected by their data set.
So, they are collecting geolocation data to avoid selling geolocation data.
BRILLIANT
from the Youtube kids business, its pretty clear that even when they pretend to not know the details of whos being targeted, they still do, and sell targeted data as such
soo, might as well have the proper details be collected and not sellable, than collected/inferred and still sellable