Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

Vermont privacy and AI laws

Part of US States.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
Enacted
Vermont Kids CodeCovered online businesses owe minors a minimum duty of care, must set high-privacy defaults and offer tools, and must avoid prohibited data and design practices. Age assurance data has privacy limits.Next: Jan 1, 2027 Takes effect · in 2 months
Enacted
Vermont VDPOSANew comprehensive privacy law with low applicability thresholds, broad consumer health data provisions that apply to all businesses, an expanded sensitive data definition, profiling and automated-decision transparency, and a disclosure requirement for using personal data to train AI models. Consumers get the usual access, correction, deletion, portability and opt-out rights.Next: Jan 1, 2028 Vermont Data Privacy and Online Surveillance Act takes effect · in 14 months

Upcoming deadlines

Takes effectJan 1, 2027 · in 2 months
Vermont Kids CodeTakes effect9 V.S.A. sections 2449a to 2449j effective.Vermont
Takes effectJan 1, 2028 · in 14 months
Vermont VDPOSAVermont Data Privacy and Online Surveillance Act takes effectAll obligations under Act 145 apply (sec. 4).Vermont
EnforcementJun 30, 2029 · in 2.7 years
Vermont VDPOSAMandatory 60-day cure period expiresThe AG's duty to issue a cure notice before enforcement ends June 30, 2029 (Act 145 sec. 3).Vermont

Past deadlines

MilestoneJun 12, 2025 · 17 months ago
Vermont Kids CodeSigned by GovernorBecame Act 63.Vermont