Skip to navigation Skip to content Skip to subnav
Searching 2023-2024 Session

The Vermont Statutes Online

The Vermont Statutes Online have been updated to include the actions of the 2023 session of the General Assembly.

NOTE: The Vermont Statutes Online is an unofficial copy of the Vermont Statutes Annotated that is provided as a convenience.

Title 27 : Property

Chapter 018 : Unclaimed Property

Subchapter 014 : Confidentiality and Security of Information

(Cite as: 27 V.S.A. § 1617)
  • § 1617. Security breach

    (a) Except to the extent prohibited by law other than this chapter, the Administrator or Administrator’s agent shall notify a holder as soon as practicable of:

    (1) a suspected loss, misuse or unauthorized access, disclosure, modification, or destruction of confidential information obtained from the holder in the possession of the Administrator or the Administrator’s agent; and

    (2) any interference with operations in any system hosting or housing confidential information that:

    (A) compromises the security, confidentiality, or integrity of the information; or

    (B) creates a substantial risk of identity fraud or theft.

    (b) Except as necessary to inform an insurer, attorney, investigator, or others as required by law, the Administrator and the Administrator’s agent may not disclose, without the express consent in a record of the holder, an event described in subsection (a) of this section to a person whose confidential information was supplied by the holder.

    (c) If an event described in subsection (a) of this section occurs, the Administrator and the Administrator’s agent shall:

    (1) take action necessary for the holder to understand and minimize the effect of the event and determine its scope; and

    (2) cooperate with the holder with respect to:

    (A) any notification required by law concerning a data or other security breach; and

    (B) a regulatory inquiry, litigation, or similar action. (Added 2019, No. 93 (Adj. Sess.), § 2, eff. Jan. 1, 2021.)