- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Adrianne Appel2024-06-17T18:23:00
The fate of Vermont’s sweeping data privacy bill hangs in the balance after being vetoed by Republican Gov. Phil Scott on Friday.
The Democrat-led legislature is hoping to mount an override of the veto this week to push the 330-page bill over the line. If so, it would join 18 other states, including Texas, that have comprehensive consumer data privacy laws on the books. The states have acted in the absence of a comprehensive federal privacy law.
The Vermont bill aimed to give Vermonters more control over their online personal data that companies collect, share, and sell. It set strict rules about the collection and use of highly-sensitive data, such as social security numbers, and placed guardrails around data collection from children.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
Businesses will receive additional time to weigh in on proposed regulations by the California Privacy Protection Agency regarding risk assessments, cybersecurity audits, automated decision-making, and data broker registration before they’re potentially finalized later this year.
Different deadlines associated with the 13 U.S. state privacy laws currently on the books, including grace periods and enforcement dates, have proven challenging for compliance, experts discussed at CW’s Cyber Risk & Data Privacy Summit.
Connecticut has joined four other states in passing a comprehensive data privacy law that requires companies to provide consumers with information about the personal data they collect.
