Vermont Data Privacy and Online Surveillance Act - JD Supra
Vermont's new data privacy law imposes obligations on businesses that collect personal data, including opt-out rights, data minimization, and risk assessments for AI decision-making.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 29, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating in Vermont or handling Vermont residents' data. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Not specified in the excerpt; check the full act for effective date.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New requirements for consumer opt-out (including universal opt-out signals like GPC), data minimization, sensitive data protections, and risk assessments for automated decision-making technology (ADMT).
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating in Vermont or handling Vermont residents' data.
What you must do
Review and update privacy policies to include opt-out mechanisms, implement data minimization practices, and prepare for risk assessments if using ADMT.
Deadline
Not specified in the excerpt; check the full act for effective date.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- California Legislature Advances Bill Targeting Wave of CIPA Pen Register Lawsuits - Inside Privacy
- US-CONGRESS BILLS-119s5051is: Artificial Intelligence Access, Gatekeeper Exchange, and Nondiscriminatory Transfer Act of 2026; AI AGENT Act of 2026
- New Jersey Bans Surveillance Pricing Before It Takes Hold - PaymentsJournal
- Compliance Guidance for the New Vermont Data Privacy and Online Surveillance Act (VDPOSA) - Vermont Becomes the 23rd US State to Enact a Consumer Privacy Law - JD Supra
- MN SF3289: 2025 Regular Session bill