The Vermont Statutes Online

Title 9 : Commerce and Trade

Chapter 062 : Protection of Personal Information

• Subchapter 001: General Provisions
•    § 2430. Definitions [Effective January 1, 2027; see also § 2430 effective until January 1, 2027, set out above]

•    § 2430. Definitions [Effective until January 1, 2027; see also § 2430 effective January 1, 2027, set out below]

•    § 2431. Acquisition and disclosure of brokered personal information; prohibitions [Effective January 1, 2027; see also § 2431 effective until January 1, 2027, set out above]

•    § 2431. Acquisition of brokered personal information; prohibitions [Effective until January 1, 2027; see also § 2431 effective January 1, 2027, set out below]

• Subchapter 002: Security Breach Notice Act [Heading effective until January 1, 2027]
•    § 2435. Notice of security breaches [Effective January 1, 2027; see also § 2435 effective until January 1, 2027, set out above]

•    § 2435. Notice of security breaches [Effective until January 1, 2027; see also § 2435 effective January 1, 2027, set out below]

•    § 2436. Notice of data broker security breaches [Effective January 1, 2027]

• Subchapter 003: Social Security Number Protection Act
•    § 2440. Social Security number protection

• Subchapter 003A: Student Privacy
•    § 2443. Definitions

•    § 2443a. Operator prohibitions

•    § 2443b. Operator duties

•    § 2443c. Permissive use or disclosure

•    § 2443d. Operator actions that are not prohibited

•    § 2443e. Applicability

•    § 2443f. Enforcement [Effective January 1, 2027; see also § 2443f effective until January 1, 2027, set out above]

•    § 2443f. Enforcement [Effective until January 1, 2027; see also § 2443f effective January 1, 2027, set out below]

• Subchapter 003B: Educational Technology [Effective January 1, 2027]
•    § 2444a. Registration [Effective January 1, 2027]

• Subchapter 004: Document Safe Destruction Act
•    § 2445. Safe destruction of documents containing personal information

• Subchapter 005: Data Brokers
•    § 2446. Annual registration [Effective until January 1, 2027; see also§ 2446 effective January 1, 2027, set out below]

•    § 2446. Data brokers; annual registration [Effective January 1, 2027; see also § 2446 effective until January 1, 2027, set out above]

•    § 2447. Data broker duty to protect information; standards; technical requirements

• Subchapter 006: Vermont Age-Appropriate Design Code Act
•    § 2449a. Definitions [Effective January 1, 2027]

•    § 2449b. Exclusions [Effective January 1, 2027]

•    § 2449c. Minimum duty of care [Effective January 1, 2027]

•    § 2449d. Required default privacy settings and tools [Effective January 1, 2027]

•    § 2449e. Transparency [Effective January 1, 2027]

•    § 2449f. Prohibited data and design practices [Effective January 1, 2027]

•    § 2449g. Age assurance privacy [Effective January 1, 2027]

•    § 2449h. Enforcement [Effective January 1, 2027]

•    § 2449i. Limitations [Effective January 1, 2027]

•    § 2449j. Rights and freedoms of covered minors [Effective January 1, 2027]

Full Text of Chapter 062