Vermont Data Privacy Bill Signed into Law
Vermont's governor has signed the Vermont Data Privacy and Online Surveillance Act, making Vermont the fourth state to pass a comprehensive privacy law in 2026. The law takes effect January 1, 2028, and is modeled closely on Connecticut's data privacy framework.
Why this matters: State privacy laws are filling a gap that federal law has not. Vermont joining the list means more Americans now live somewhere with at least some baseline privacy rights on paper. But patchwork state laws create uneven protection depending on your zip code. The real test is enforcement and scope — who is covered, what data counts, and whether residents can actually do something when a company ignores the rules. A law that takes effect in 2028 also gives businesses almost two years to lobby for changes before it bites.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.