Vermont becomes 23rd state to enact consumer privacy law
Vermont has passed a consumer privacy law, making it the 23rd U.S. state to establish statutory protections for residents' personal data. The law adds Vermont to a growing patchwork of state-level privacy frameworks enacted in the absence of a federal standard.
Why this matters: Twenty-three states now have privacy laws. The federal government still does not. That means your rights depend on your zip code. If you live in Vermont, you have new tools. If you live somewhere else, maybe not. This patchwork is not an accident — it is what happens when Congress stalls long enough that states fill the gap one by one. The problem is that companies do not operate state by state, and most people do not know which rules apply to them.
Who should care: General readers · Privacy officers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.