The Vermont Statutes Online

Title 9 : Commerce and Trade

Chapter 061a : Data Privacy [Effective January 1, 2028]

Subchapter 001 : Vermont Data Privacy and Online Surveillance Act [Effective January 1, 2028]

• § 2415j. Attorney General enforcement; reporting [Effective January 1, 2028]

  (a) Consumer Protection Act. A violation of this subchapter shall be deemed a violation of the Vermont Consumer Protection Act, pursuant to chapter 63 of this title. The Attorney General has the same authority to enforce this subchapter as provided under chapter 63, subchapter 1 of this title. This subchapter shall not be construed as providing the basis for, or be subject to, a private right of action for violations of this subchapter or any other law.

  (b) Reporting. Annually, on or before December 1, the Attorney General shall submit a report to the General Assembly disclosing:

  (1) the number of notices of violation pursuant to this subchapter that the Attorney General has issued;

  (2) the nature of each violation;

  (3) the number of violations that resulted in an enforcement action being taken;

  (4) the number of enforcement actions that proceeded to trial;

  (5) whether and to what extent the Attorney General has offered an opportunity for a controller or processor to cure a violation; and

  (6) any other matter the Attorney General deems relevant for the purposes of the report.

  (c) Guidance. The Attorney General shall provide, and update as necessary, guidance to controllers and processors for compliance with the terms of the Vermont Data Privacy and Online Surveillance Act. (Added 2025, No. 145 (Adj. Sess.), § 1, eff. January 1, 2028.)