An act relating to data brokers and personal information

Summary

The act creates a statewide registry for data brokers, mandates breach notifications to consumers within 45 days, and establishes an online portal where residents can request that all of their brokered personal information be deleted. It also sets standards for how brokers must verify users, protect data, and report annual metrics. The law aims to give Vermonters more control and transparency over the sale and use of their sensitive information.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share