Yes, Virginia is certainly not alone. There are some states and county governments that are trying very hard to protect their constituents. The counties in Michigan that I have mentioned before for example.

Not all the information has already been purchased. Many of these companies are in the middle of a feeding frenzy right now to try and get their hands on the images before the legislature (state or federal) catches on. I think they will catch on. They did in the Rebecca Shaeffer case, but it took her murder to wake them up. The result was the Driver Protection Act. Years later Amy Boyer lost her life because of information a data broker provided to her murderer. The company had mined the information from the "public records" and then enhanced with a pretext call to give Amy's killer her work address. The courts held the databroker responsible in civil court and legislators passed the Amy Boyer Act.

Here is another interesting experiment you can try. I learned this from some old cached files of the Shadowcrew site after the feds shut down the site. It's called "Googling for identities". Type in the first few digits of your driver's license number or SSN into any search engine. Please don't include the last four digit. When I did this using my own SSN in this form "Social Security # XXX-XX-" replacing the X's with my own numbers I found nearly four thousand numbers that were accidently published to the Net by the people's employer. I notified the Privacy Council who in turn notified the company and the search engine provider and the documents were removed.