Bill > H0121

This bill proposes to afford data privacy protections to Vermonters. Key provisions include: - Defining terms like "biometric data," "consent," "consumer," "controller," "processor," and "sensitive data," and establishing applicability thresholds based on the volume of personal data processed. - Granting consumers rights to confirm data processing, access their data, correct inaccuracies, delete data, and opt out of targeted advertising, data sales, and automated decisions. - Imposing duties on controllers and processors to limit data collection, secure data, provide transparency, and obtain consent for sensitive data. - Requiring controllers to conduct data protection assessments for high-risk processing like targeted advertising and profiling. - Establishing protections for minors, including requirements for age-appropriate design, default privacy settings, and limitations on dark patterns and unsolicited contact. - Empowering the Attorney General to enforce the law and evaluate data protection assessments, and providing for a limited private right of action. The bill also directs public education efforts and further study on implementation and policy recommendations.

Budget and Finance, Business and Industry, Housing and Urban Affairs

https://legislature.vermont.gov/bill/status/2024/H.121