Law / United States / 
Vermont
Vermont Data Privacy and Online Surveillance Act, consumer rights
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force in 465 days, effective 1 January 2028.
A data subject rights rule binding private bodies.
As of 27 August 2026.
What it requires
- This right and this deadline do not bind anyone yet; they take effect January 1, 2028.
- Once in force, give a Vermont consumer access, correction, deletion, portability, opt-out of targeted advertising and sale, a profiling explanation and reevaluation right for housing decisions, and a list of third parties their data was sold to.
- Respond to a consumer rights request without undue delay and not later than 45 days after receipt, with one 45-day extension available, once the Act takes effect.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
This right and this deadline do not currently bind anyone; they take effect January 1, 2028.
As enacted, sec. 2415d will grant access (including a right to know about profiling used for legal or significant-effect decisions), correction, deletion, portability, opt-out of targeted advertising, sale, and profiling, a profiling-specific explanation and correction-and-reevaluation right for housing decisions, and a right to a list of third parties personal data was sold to, a broader rights list than New Hampshire, Kentucky, or Rhode Island.
A controller will have to respond without undue delay and not later than 45 days after receipt, with one 45-day extension available.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotautomated_outreachhigh_risk_decisions
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.