Vermont passes strong data privacy law
The Vermont legislature has recently passed a robust data privacy bill, making it one of the strongest measures in the country. This legislation aims to crack down on companies’ use of online personal data and allows consumers to file civil lawsuits against companies that violate certain privacy rules.
While the Democrat-controlled legislature supports the bill, Republican Governor Phil Scott has expressed concerns about how certain parts of the legislation may impact small businesses. The Governor has not yet reviewed the final bill but will make a decision once he has had a chance to do so.
The bill includes provisions that prohibit the sale of sensitive data such as social security and driver’s license numbers, financial, and health information. It also sets limits on the amount of personal data that companies can collect and use, as outlined by the Electronic Privacy Information Center (EPIC).
Caitriona Fitzgerald, the deputy director of EPIC, praises Vermont’s data privacy law, stating that it is among the strongest, if not the strongest, in the country. The legislation emphasizes the importance of protecting personal data in an era where everything we do is monetized in a surveillance economy.
State Representative Monique Priestley, a Democrat and sponsor of the bill, emphasized the urgency of the moment to safeguard personal data. The legislation empowers consumers by allowing them to sue companies that violate privacy laws, as this has proven to be the most effective way to enforce such regulations.
In response to concerns about the potential impact on small businesses, the legislation is designed to target data brokers and large data holders. It aims to avoid burdening small businesses that may not be equipped to comply with stringent data privacy standards.
Additionally, the bill includes provisions to protect children online by minimizing addictive features. The legislation aligns with a broader trend of states enacting laws to protect personal data online, following Maryland’s recent measures aimed at better safeguarding personal information from Big Tech.
If signed by the Governor, Vermont’s data privacy bill will go into effect in 2025, with provisions allowing consumers to sue taking effect in 2026. The legislation will undergo a review in 2028 to assess its effectiveness and associated risks.
In conclusion, Vermont’s data privacy legislation represents a significant step towards protecting consumers’ personal data and holding companies accountable for privacy violations. While balancing the interests of businesses, the bill prioritizes the security and privacy of individuals in an increasingly digital world.
