Business Compliance Guidance for the New Vermont Data Privacy and Online Surveillance Act (VDPOSA) - Hinshaw & Culbertson LLP
Vermont's new data privacy law (VDPOSA) introduces requirements similar to CCPA/CPRA, including universal opt-out, data minimization, and risk assessments for ADMT. Businesses must comply by July 1, 2024.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 27, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: July 1, 2024. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Vermont enacted the VDPOSA, which expands consumer privacy rights, mandates universal opt-out mechanisms (e.g., Global Privacy Control), restricts sensitive data processing, and requires data minimization and risk assessments for automated decision-making technologies (ADMT).
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants
What you must do
Review and update privacy policies, implement universal opt-out signals, conduct data mapping and risk assessments for ADMT, and ensure compliance with data minimization principles.
Deadline
July 1, 2024
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Article | New Jersey implements nation’s highest data broker fee - POLITICO Pro
- Another State Approves Ban on AI-Powered Surveillance Pricing - inc.com
- US-CONGRESS S4441: CREATE AI Act
- NJ Governor Signs Grocery Surveillance Pricing Ban with Private Right of Action into Law - EPIC – Electronic Privacy Information Center
- Vermont, The Green Mountain State, Gives Green Light to Comprehensive Privacy Law - The National Law Review