§ 2415iStatuteReference only

Construction of Duties

Effective January 1, 2028Reviewed July 2026

Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.

What it requires

Clarifies that the Act does not restrict compliance with law, law-enforcement cooperation, fraud/security response, contract performance, or approved scientific research, and adds a new exception (not in the introduced bill) allowing limited internal use of personal data to detect or correct bias in automated decision-making. Also confirms the Act does not authorize facial recognition use by law enforcement.

Legal text (excerpt)

Nothing in this subchapter modifies 2020 Acts and Resolves No. 166, Sec. 14 or authorizes the use of facial recognition technology by law enforcement. ... (4) process personal data for the purposes of profiling ..., provided the personal data are: (A) processed only to the extent necessary to detect or correct any bias ....

Vermont Data Privacy and Online Surveillance Act: § 2415i, Statute, effective 2028

Primary source

Vermont Office of the Attorney General: § 2415i: Construction of Duties

Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.

Stop Guessing. Start Knowing.

Find out exactly where your website stands before a regulator does.

Get My Compliance Audit