The Vermont Statutes Online

Title 9 : Commerce and Trade

Chapter 061a : Data Privacy [Effective January 1, 2028]

Subchapter 001 : Vermont Data Privacy and Online Surveillance Act [Effective January 1, 2028]

• § 2415b. Applicability [Effective January 1, 2028]

  (a) Thresholds. Except as provided in subsection (b) of this section, this subchapter applies to a person that conducts business in this State or a person that produces products or services that are targeted to residents of this State and that during the preceding calendar year:

  (1) controlled or processed the personal data of not fewer than 35,000 consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction;

  (2) controlled or processed the sensitive data of not fewer than 3,000 consumers, excluding personal data controlled or processed solely for the purposes of completing a payment transaction; or

  (3) offered for sale in trade or commerce the personal data of not fewer than 3,000 consumers.

  (b) Health data applicability. Section 2415k of this subchapter and the provisions of this subchapter concerning consumer health data and consumer health data controllers apply to a person that conducts business in this State or a person that produces products or services that are targeted to residents of this State.

  (c) Controlling law. In the event of a conflict between the provisions of this subchapter and any other law, including the Vermont Age-Appropriate Design Code Act, the provisions of the law that afford the greatest protection for the right of privacy for consumers shall control. (Added 2025, No. 145 (Adj. Sess.), § 1, eff. January 1, 2028.)