The Vermont Data Privacy and Online Surveillance Act establishes privacy requirements affecting certain businesses that collect, use, or process the personal data of Vermont residents. The law addresses consumer privacy rights, data processing practices, online tracking and surveillance, and business responsibilities involving personal information.
This FAQ section provides plain-language answers to common questions about Vermont’s privacy requirements, including which organizations may be covered, what rights consumers have, and how the law may affect businesses operating websites, online services, and other digital platforms.
Effective Date: January 1, 2028
This law has been enacted but is not yet effective. Businesses should review the applicable requirements and prepare for compliance before the effective date. Certain provisions may have different implementation deadlines.
For additional tools and detailed guidance, see the CLIClaw Privacy Compliance Library.