Vermont Amends Data Broker Law

Vermont recently amended its data broker registry law with the passage of H.211. The changes take effect January 1, 2027. As amended, the law will modify who is covered, disclosures that must be made at registration and due diligence obligations. This is a significant expansion of the law, which currently only requires data brokers to protect brokered personal information. Some highlights to keep in mind:

• Recipient Verifications. Once the amendment goes into effect, before a broker shares brokered personal information, the broker will need to, among other things, verify the identity of the recipient, review its intended use purposes, and not share the data if the broker has a reasonable reason to think the information will be used in violation of the law.