Subject to statutory conditions and exceptions, consumers may access, correct, delete, and obtain copies of their personal data. They may also opt-out of targeted advertising, personal-data sales, and profiling used for automated decisions producing legal or similarly significant effects.
Vermont also provides a right to obtain a list of third-parties to which the controller sold personal data, along with additional rights concerning qualifying profiling decisions.
Controllers generally must respond within 45 days, with one reasonably necessary extension of up to another 45 days and timely notice. They must provide an appeal process and decide appeals within 60 days.
For operational guidance and structured compliance documentation tools, visit the CLIClaw Privacy Compliance Library.
These FAQs provide general information and operational commentary. They are not legal advice. Applicability and compliance obligations depend on an organization’s activities, data practices, exemptions, and circumstances. It is intended as a starting point for understanding the issues discussed and should not be relied on as a substitute for advice from qualified legal counsel.
These materials were obtained directly from the Federal Government public website and are posted here for your review and reference only. No Claim to Original U.S. Government Works. This may not be the most recent version. The U.S. Government may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.