Vermont Data Privacy and Online Surveillance Act (Act 145 of 2026)
Enacts a comprehensive consumer data privacy law giving Vermonters rights over their personal data and setting duties for controllers and processors, effective January 1, 2028.
5 on file · 4 became law · 0 still moving · 0 moved in 30 days
Enacts a comprehensive consumer data privacy law giving Vermonters rights over their personal data and setting duties for controllers and processors, effective January 1, 2028.
Requires disclosure of synthetic media, including AI-generated deepfakes, in election-related communications within a set period before an election.
Requires online services likely to be accessed by minors to meet a minimum duty of care, set high-privacy defaults for minors and avoid design features that drive compulsive use.
Would have created a comprehensive consumer privacy law with a private right of action and a kids age-appropriate design code; the Governor vetoed it and the Senate sustained the veto.
Requires an inventory of automated decision systems used by Vermont state government and creates an AI council to oversee state AI use and a code of ethics.