{"id":276874,"date":"2026-06-17T14:19:00","date_gmt":"2026-06-17T18:19:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/17\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law\/"},"modified":"2026-06-20T07:55:26","modified_gmt":"2026-06-20T11:55:26","slug":"vermont-becomes-23rd-state-to-enact-consumer-privacy-law","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/17\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law\/","title":{"rendered":"Vermont becomes 23rd state to enact consumer privacy law"},"content":{"rendered":"<p><a href=\"https:\/\/iapp.org\/news\/a\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law\">Vermont becomes 23rd state to enact consumer privacy law<\/a><\/p>\n<p><a href=\"https:\/\/iapp.org\/news\/a\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law\">https:\/\/iapp.org\/news\/a\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-06-17 14:19:00<\/a><\/p>\n<p>Source Domain: <a href=\"iapp.org\">iapp.org<\/a><\/p>\n<p>Vermont became the 23rd state to enact a comprehensive state privacy law. Gov. Phil Scott, R-Vt., signed Senate Bill 71, the Vermont Data Privacy and Online Surveillance Act,\u00a0into law 16 June.\u00a0<\/p>\n<p>With Scott&#8217;s signature, Vermont becomes the fourth state to pass a comprehensive privacy law this year, joining Alabama, Louisiana and Oklahoma. The law will enter into force 1 Jan. 2028. Along with the signing of SB71, Scott signed a data broker registration bill; a day prior, he signed a bill restricting the sale of customers&#8217; genetic data by commercial testing companies.\u00a0<\/p>\n<p>Under Vermont&#8217;s new privacy law, enforcement power is granted exclusively to the state attorney general with no private right of action. The state attorney general must submit an annual report containing information on its enforcement to the Vermont General Assembly. The law features a 60-day cure period for violations that expires 30 June 2029.\u00a0<\/p>\n<p>The law applies to data controllers or processors that handle the personal data of more than 35,000 state residents, those processing the sensitive personal data of at least 3,000 state residents or selling the personal data of at least 3,000 residents.<\/p>\n<p>Additionally, the new law contains requirements for controllers and processors to respect users&#8217; opt-out preference signals as well as those submitted by authorized agents. The Vermont Data Privacy and Online Surveillance Act also requires privacy notice requirements that disclose whether a controller collects, uses or sells personal data to train large language models, but not a state-specific privacy notice if the entity&#8217;s general notice complies with the law.\u00a0<\/p>\n<p>Stauss PLLC Founder David Stauss, CIPP\/E, CIPP\/US, CIPT, FIP, said that Vermont&#8217;s privacy law most closely resembles Connecticut&#8217;s privacy law regime, such as provisions covering the sale and processing of sensitive personal data and requiring data protection impact assessments. He said it departs from Connecticut by setting a threshold that triggers&#8230;<\/p>\n<p><a href=\"https:\/\/iapp.org\/news\/a\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Vermont becomes 23rd state to enact consumer privacy law https:\/\/iapp.org\/news\/a\/vermont-becomes-23rd-state-to-enact-consumer-privacy-law Publish Date: 2026-06-17 14:19:00 Source&#8230;<\/p>\n","protected":false},"author":1,"featured_media":276876,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.contentstack.io\/v3\/assets\/bltd4dd5b2d705252bc\/bltadcb9c01573182c1\/6a32e3d1146ad6641f7bb8a4\/vermont-capitol-flowers-us-061726.jpg","fifu_image_alt":"","footnotes":""},"categories":[16],"tags":[173],"class_list":["post-276874","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy","tag-iapp"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276874"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=276874"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276874\/revisions"}],"predecessor-version":[{"id":276877,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/276874\/revisions\/276877"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/276876"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=276874"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=276874"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=276874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}