Law note · Vermont
Vermont Data Privacy and Online Surveillance Act, consumer rights
This right and this deadline do not currently bind anyone; they take effect January 1, 2028.
As enacted, sec. 2415d will grant access (including a right to know about profiling used for legal or significant-effect decisions), correction, deletion, portability, opt-out of targeted advertising, sale, and profiling, a profiling-specific explanation and correction-and-reevaluation right for housing decisions, and a right to a list of third parties personal data was sold to, a broader rights list than New Hampshire, Kentucky, or Rhode Island.
A controller will have to respond without undue delay and not later than 45 days after receipt, with one 45-day extension available.
What it asks of an app
- This right and this deadline do not bind anyone yet; they take effect January 1, 2028.
- Once in force, give a Vermont consumer access, correction, deletion, portability, opt-out of targeted advertising and sale, a profiling explanation and reevaluation right for housing decisions, and a list of third parties their data was sold to.
- Respond to a consumer rights request without undue delay and not later than 45 days after receipt, with one 45-day extension available, once the Act takes effect.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Vermont session law text, 2026 Vt. Acts & Resolves Act 145 (S.71) as enacted, Vermont Legislature website