Vermont. Data access / sharing. Act
Vermont data broker lawVermont data broker registration and security law (9 V.S.A. §§ 2430, 2446–2447)
In force
Partly verified
Low confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.
§1Summary
- Synopsis
Requires data brokers to register annually, disclose opt-out practices and data broker security breaches, and maintain an information security programme, and bans acquiring broker data by fraud.
- Key themes
- Unique features
First US data broker registry.
- SaaS relevance
Relevant to SaaS that sell or license data about consumers with whom they have no direct relationship.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Data broker breaches disclosed in annual registration
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- $50 per day for failure to register, up to $10,000 per year
§3Dates
- Key dates
- Adopted
- In force
- Act 171 (2018); amended by Act 63 (2023) expanding disclosures.
§4Text and authority
- Text
- Authoritative text legislature.vermont.gov
- Authority
- Vermont Secretary of State (registry); Vermont Attorney General (enforcement)
§5Where it applies
- Domestic law of
- Vermont
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.