Vermont Governor Phil Scott Enacts Comprehensive Data Privacy and Online Surveillance Act
Vermont Governor Phil Scott signed S.71 into law as Act 145 on June 16, 2026, establishing the Vermont Data Privacy and Online Surveillance Act. This new legislation, which will become effective on January 1, 2028, aims to regulate data brokers and the handling of personal information within the state. The Act introduces various provisions, including consumer rights to confirm, access, correct, delete, and obtain their personal data in a portable format. It also grants consumers the right to opt out of targeted advertising, the sale of personal data, and profiling that leads to significant automated decisions. Businesses operating in Vermont or targeting its residents will be subject to the law if they control or process personal data of at least 35,000 consumers, sensitive data of at least 3,000 consumers, or offer for sale the personal data of at least 3,000 consumers. The law also has broader applicability for consumer health data provisions, regardless of these numerical thresholds. Controllers are req... 
