On May 29, 2026, Vermont’s legislature passed S71, the Vermont Data Privacy and Online Surveillance Act (the Act). The Act is now pending Vermont Governor Phil Scott’s signature. If signed, it would become effective January 1, 2028.
The Act revives data privacy legislation in Vermont after Governor Scott vetoed a previous version. Unlike its predecessor, this Act much more closely aligns to other state consumer privacy bills drafted in the Connecticut style. That said, as with any new consumer privacy law, companies doing business in the state should assess the applicability of the Act and implement a compliance program.
In Depth
Who does the Act apply to?
The Act applies to anyone who does business in Vermont or offers products or services to Vermont residents and who, in the preceding calendar year, engaged in any of the following:
