Law / United States / 
Vermont
Vermont Age-Appropriate Design Code Act, de-identified data
Vermont Age-Appropriate Design Code Act, 9 V.S.A. sec. 2449a(14) and (21)(B)
A de-identification rule binding private bodies.
- Obligation class
- Disclosure, Prohibition
- Audit expectation
- none
What it requires
- From , if you are a covered business that possesses de-identified data, take reasonable measures to ensure that the data cannot be used to reidentify an individual or be associated with an individual, device or household (9 V.S.A. sec. 2449a(14)(A)).
- Publicly commit to process the data only in a de-identified fashion and not attempt to reidentify it (9 V.S.A. sec. 2449a(14)(B)).
- Contractually obligate any recipients of the de-identified data to comply with all provisions of the subchapter (9 V.S.A. sec. 2449a(14)(C)).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Section 2449a(14) states the conditions a covered business must meet for data to count as de-identified data. It states no log or record duty and sets no retention period.
- Kind
- None
- As of
What this law does
Under 9 V.S.A. sec. 2449a(14), data counts as de-identified data under the Vermont Age-Appropriate Design Code Act only if the covered business that possesses the data takes reasonable measures to ensure that the data cannot be used to reidentify an individual.
Under 9 V.S.A. sec. 2449a(14)(B), data counts as de-identified data under the Vermont Age-Appropriate Design Code Act only if the covered business that possesses the data publicly commits to process the data only in a de-identified fashion and not attempt to reidentify it.
Under 9 V.S.A. sec. 2449a(14)(C), data counts as de-identified data under the Vermont Age-Appropriate Design Code Act only if the covered business that possesses the data contractually obligates any recipients of the data to comply with all provisions of the subchapter. Under 9 V.S.A. sec. 2449a(21)(B), personal data under the Vermont Age-Appropriate Design Code Act does not include de-identified data or publicly available information. Section 2449a of title 9 of the Vermont Statutes takes effect on .
When LexLint raises it
When your app profile says your app processes personal data, processes de-identified data or serves under-18s.
Back to the example · Lint your app
Page updated .