High urgency

Business Compliance Guidance for the New Vermont Data Privacy and Online Surveillance Act (VDPOSA) - Hinshaw & Culbertson LLP

Detected July 27, 2026 · in US State Data-Privacy Laws

Vermont's new data privacy law (VDPOSA) introduces requirements similar to CCPA/CPRA, including universal opt-out, data minimization, and risk assessments for ADMT. Businesses must comply by July 1, 2024.

Aforeworn detected this change in the US State Data-Privacy Laws space on July 27, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: July 1, 2024. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.

What changed

Vermont enacted the VDPOSA, which expands consumer privacy rights, mandates universal opt-out mechanisms (e.g., Global Privacy Control), restricts sensitive data processing, and requires data minimization and risk assessments for automated decision-making technologies (ADMT).

Who it affects

Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants

What you must do

Review and update privacy policies, implement universal opt-out signals, conduct data mapping and risk assessments for ADMT, and ensure compliance with data minimization principles.

Deadline

July 1, 2024

Source: https://news.google.com/rss/articles/CBMi_wFBVV95cUxNV2lvcjJ0NjVxa0wwdzY5S1pkTlpGWDk1OFlRUUM5OFBHRHVLOUZfbDdYQnFzV3pVTnVHYmwxaDBveDV5YnRzcVk1VklIRktwZ2ZBbHAtY0g3Wm1fNVk1N3JvRkpGVGRMQnlxbDFoTlNhUWVJU2x3c1l6Z3ZPWnpRV3VRUnZpLVdrLWZxckJqM3duWWhRQkxSSnJpNk5zZXVIRDhaZi05UkJvUGtqY25uQXlHekxWcHZDbHc3eTZxbWZiNFlfRmtGUHpSY25uMzJzUlRiZXhIcXB0dWhRZnRaN0YwQmtHRGpRaG5aeWFEM08xYlJUME1oUE5NZ1pHbzg?oc=5

Never miss a change like this again

Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.

Start your free trial

Related changes in US State Data-Privacy Laws