Vermont data broker registration and security
Enacted in force
Fields requiring verification
- enforcement date: Unverified — No distinct enforcement-start date was established. Primary source
In plain English
- Businesses knowingly collecting and selling or licensing brokered personal information of consumers with whom they lack a direct relationship, subject to statutory exclusions. Primary source
- Under the version in effect through2026, register by January31 following a qualifying year, pay the $100 fee and submit required practice/minor/breach disclosures. Primary source
- Maintain the written comprehensive information-security program required by§2447. Primary source
- Apply appropriate access controls, employee training, encryption and service-provider safeguards required by§2447. Primary source
Dates and phased obligations
2019-01-01 Primary source
Current online code also contains a future version effective2027-01-01 with30-day/July1 registration, $900 fee and bond requirements. Those future requirements are not represented as in force in2026 or counted as another row. Source and qualifications
Questions from this record
Who does 9VSA2446–2447; Act171 (2018) cover?
Businesses knowingly collecting and selling or licensing brokered personal information of consumers with whom they lack a direct relationship, subject to statutory exclusions. Primary source
What is the law’s status?
Enacted / in force Primary source
What date does this record track?
2019-01-01 Primary source
Has this record been verified?
This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source
- Vermont Legislature, 9VSA2430Data-broker and brokered-information definitions
- Vermont Legislature, 9VSA2446Version effective until2027-01-01; effective2019-01-01 history; penalties
- Vermont Legislature, 9VSA2447Written security-program requirements
Verification history
Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.