AI & Privacy/Vermont/9VSA2446–2447; Act171 (2018)

Vermont data broker registration and security

Enacted in force

Jurisdiction

Applies to

Businesses knowingly collecting and selling or licensing brokered personal information of consumers with whom they lack a direct relationship, subject to statutory exclusions. [source]

Penalty

Through2026, registration failure: $50 per day, capped at $10,000 per year, plus unpaid fees and other lawful relief; AG may seek collection and injunctions. Future2027 provisions have different penalties. [source]

Detail review

Accepted record facts reviewed

Nov 13, 2026

Fields requiring verification

enforcement date: Unverified — No distinct enforcement-start date was established. Primary source

In plain English

Businesses knowingly collecting and selling or licensing brokered personal information of consumers with whom they lack a direct relationship, subject to statutory exclusions. Primary source
Under the version in effect through2026, register by January31 following a qualifying year, pay the $100 fee and submit required practice/minor/breach disclosures. Primary source
Maintain the written comprehensive information-security program required by§2447. Primary source
Apply appropriate access controls, employee training, encryption and service-provider safeguards required by§2447. Primary source

Dates and phased obligations

2019-01-01 Primary source

2019-01-01 · operative

2019-01-01 Primary source

Current online code also contains a future version effective2027-01-01 with30-day/July1 registration, $900 fee and bond requirements. Those future requirements are not represented as in force in2026 or counted as another row. Source and qualifications

Questions from this record

Who does 9VSA2446–2447; Act171 (2018) cover?

Businesses knowingly collecting and selling or licensing brokered personal information of consumers with whom they lack a direct relationship, subject to statutory exclusions. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

2019-01-01 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Vermont Legislature, 9VSA2430Data-broker and brokered-information definitions
Vermont Legislature, 9VSA2446Version effective until2027-01-01; effective2019-01-01 history; penalties
Vermont Legislature, 9VSA2447Written security-program requirements

Verification history

Nov 13, 2026 — Facts and dates reconciled from the accepted T1 report. Source
Nov 13, 2026 — Accepted T1 report content changed. Source

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.

View the matrix