WeVote
Log In

Bill

Bill

S 70

An act relating to data brokers and personal information

2025-2026 Regular Session Introduced by Alison Clarkson and 5 co-sponsors

Vermont would regulate data brokers to increase transparency and consumer control over personal data, including clear disclosures, opt-out rights, and stronger data security.

Read 1st time & referred to Committee on Economic Development, Housing and General Affairs
0
WeVote Research Nonpartisan
Bill Summary · S 70

Bill overview

S.70 (2025-2026) of Vermont, titled An act relating to data brokers and personal information, proposes new requirements and protections surrounding data brokers and the collection, use, and sale of personal information. The bill was read for the first time and referred to the Committee on Economic Development, Housing and General Affairs on February 18, 2025. It has multiple co-sponsors.

Purpose and intent

  • Enhance transparency and accountability of data brokers operating in Vermont.
  • Strengthen protections for residents’ personal information.
  • Establish duties for data brokers to curb misuse and unauthorized access to data.

Key provisions and changes

While the specific text of S.70 is not provided here, typical elements in a data broker bill of this type often include:

  • Definition of data broker: Clarifies who is considered a data broker (entities that knowingly collect, assemble, or sell personal data about a Vermont resident for gain or for third-party sharing).
  • Consumer rights and notices: Requires data brokers to provide clear disclosures about data collection practices, purposes, and third-party sharing; mandates mechanisms for consumers to opt out of sale or certain types of data processing.
  • Opt-out and access requests: Establishes processes for Vermonters to request deletion, correction, or restriction of their personal data, and to opt out of targeted advertising or profiling.
  • Data security standards: Imposes security requirements for storage, transmission, and handling of personal information by data brokers.
  • Prohibition or restriction on certain practices: Limits or bans specific data broker activities that are deemed harmful or intrusive (e.g., sale of highly sensitive data without consent).
  • Data minimization and retention: Sets limits on how long data can be retained and mandates reasonable data minimization practices.
  • Compliance, enforcement, and penalties: Outlines enforcement mechanisms, potential penalties for non-compliance, and responsibilities of the Vermont Attorney General or another designated agency.
  • Registration or reporting: May require data brokers to register with a state agency or submit periodic reports detailing data handling practices and incidents.

Who would be affected

  • Data brokers and entities that collect, aggregate, or sell personal data of Vermont residents.
  • Businesses that rely on data broker services for marketing, analytics, or fraud prevention, as they may need to verify data broker compliance.
  • Vermont residents who would gain new rights to access, control, and request deletion or restriction of their personal information.
  • State agencies responsible for enforcement and consumer protection.

Procedural and timeline aspects

  • Initial action: Read 1st time and referred to Committee on Economic Development, Housing and General Affairs (February 18, 2025).
  • Next steps: Committee review, potential amendments, and eventual floor consideration in the Vermont General Assembly. If advanced, the bill would proceed through additional readings, potential fiscal notes, and, upon passage, be signed into law or vetoed (per Vermont legislative process).

Potential impact and considerations

  • Consumer empowerment: Provides Vermonters with clearer rights regarding data brokers and personal information.
  • Industry implications: Could increase compliance costs for data brokers due to new disclosure, opt-out, and security requirements.
  • Market effects: May influence how marketing and data-driven services operate within Vermont, including opting out workflows and data-sharing agreements.
  • Enforcement: Depends on designated agency’s authority and resources; effectiveness relies on clear penalties and enforcement processes.

Note: This summary reflects the bill’s stated purpose and typical provisions for data broker legislation. For precise language, definitions, specific rights, obligations, exceptions, and exact timeline, please refer to the official bill text and any amendments adopted by the committee.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.