Attorney General Enforcement; Reporting

What it requires

A violation is deemed a violation of the Vermont Consumer Protection Act (9 V.S.A. chapter 63), and the Attorney General enforces it with the same chapter 63, subchapter 1 authority. The Act bars any private right of action; the bill as introduced had also given consumers a limited private right of action against data brokers and large data holders for certain violations. A separate transitional provision in the Act (Sec. 3, not part of § 2415j) provides that from January 1, 2028 through June 30, 2029, before initiating any action, the Attorney General must issue a notice of violation if the Attorney General determines a cure is possible, and may sue under § 2415j(a) if the violation is not cured within 60 days after the notice is received. The Attorney General must report to the General Assembly annually, by December 1, on enforcement activity.

Statute text

A violation of this subchapter shall be deemed a violation of the Vermont Consumer Protection Act, pursuant to chapter 63 of this title. ... This subchapter shall not be construed as providing the basis for, or be subject to, a private right of action for violations of this subchapter or any other law.

Vermont Data Privacy and Online Surveillance Act, § 2415jRead the full section from Vermont Office of the Attorney General