Legal Compliance: Vermont Data Privacy and Online Surveillance Act ("VDPOSA")

Understand Vermont’s Consumer Privacy Requirements.
The Vermont Data Privacy and Online Surveillance Act establishes consumer privacy rights and compliance requirements for covered businesses involving personal data, consumer rights requests, privacy notices, targeted advertising, data sales, sensitive data, consumer health data, data minimization, security, and other privacy practices.
The law was enacted in 2026, with an effective date of January 1, 2028. Organizations should evaluate whether the law applies to their operations and establish appropriate processes to address applicable privacy requirements.
CLIClaw’s Vermont Privacy Compliance Solutions help organizations understand the law, evaluate potential applicability, identify compliance gaps, and establish appropriate privacy processes and documentation to support ongoing compliance.
Use the solutions and resources below to understand and address Vermont privacy compliance requirements.