Consumer Personal Data Rights
Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.
What it requires
Consolidates and expands consumer rights beyond the introduced bill: confirm/access personal data and profiling-based inferences, correct inaccuracies, delete data, obtain a portable copy, opt out of targeted advertising/sale/certain profiling, and (new) question and seek review of automated decisions with legal or similarly significant effects, plus obtain a list of third parties that purchased the consumer's data. Authorized-agent opt-out designation now lives in this section rather than standing alone.
Legal text (excerpt)
A consumer shall have the right to: ... (6) if the consumer's personal data were processed for the purposes of profiling ...: (A) question the result of such profiling; (B) be informed of the reason ...; and (7) obtain from the controller a list of the third parties to which such controller has sold the consumer's personal data ....
Primary source
Vermont Office of the Attorney General: § 2415d: Consumer Personal Data Rights ↗Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.