§ 2415aStatuteReference only

Short Title and Definitions

Effective January 1, 2028Reviewed July 2026

Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.

What it requires

Establishes the short title, "Vermont Data Privacy and Online Surveillance Act," and defines key terms. As enacted, "sensitive data" was broadened beyond the introduced bill to expressly include consumer health data, genetic and biometric data generally (not just data used for identification), neural data, and data revealing status as nonbinary or transgender, in addition to precise geolocation and data from a known child.

Legal text (excerpt)

This subchapter shall be known and may be cited as the "Vermont Data Privacy and Online Surveillance Act." ... "Sensitive data" means personal data that includes: (A) data revealing: (i) racial or ethnic origin, religious beliefs, sex life, sexual orientation, status as nonbinary or transgender, or citizenship or immigration status; ... (C) genetic or biometric data ...; ... (F) neural data;

Vermont Data Privacy and Online Surveillance Act: § 2415a, Statute, effective 2028

Primary source

Vermont Office of the Attorney General: § 2415a: Short Title and Definitions

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit