Bill > S0070

This bill proposes comprehensive updates to Vermont's data protection laws, focusing on enhancing consumer privacy and regulating data brokers. The bill introduces several key provisions, including establishing a new mandatory registration system for data brokers, requiring them to register annually with the Secretary of State, pay registration fees, and provide detailed information about their data collection practices. A significant innovative feature is the creation of an accessible deletion mechanism by January 1, 2028, which will allow consumers to request the deletion of their personal information from multiple data brokers through a single, centralized platform. The bill also strengthens notification requirements for data breaches, mandating that data brokers inform consumers and the Attorney General within 45 days of discovering a security breach, with specific details about the incident. Additionally, the legislation requires data brokers to implement credentialing procedures to ensure that personal information is used only for legitimate and legal purposes, and imposes substantial penalties for non-compliance, including daily fines and potential legal actions. The bill aims to provide Vermont residents with greater control over their personal information, increase transparency in data collection practices, and establish robust protections against unauthorized use or disclosure of personal data. The legislation will take effect on July 1, 2025, giving businesses time to prepare for the new requirements.

Housing and Urban Affairs

https://legislature.vermont.gov/bill/status/2026/S.70