Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 14 JULY 2026

Vermont And New Jersey Data Broker Laws Add To Expanding State Privacy Patchwork

Davis+Gilbert LLP
Davis+Gilbert LLP
Contributor
Davis+Gilbert LLP

Davis+Gilbert LLP

Legal mastery is critical but not enough. Even the best legal strategies must work in tandem with...

View firm profile
Explore more from Davis+Gilbert LLP

Vermont and New Jersey have enacted sweeping data broker legislation that imposes registration requirements, disclosure obligations, and substantial penalties on businesses that collect and sell consumer personal data without direct relationships. How will these new frameworks reshape the data brokerage industry and what immediate compliance steps must affected companies take?

United StatesPrivacy
Gary Kibel
Gary Kibel
Zachary Klein
Zachary Klein
Author LinkedIn connections

Update

On Friday July 10, the New Jersey Attorney General’s Division of Consumer Affairs responded to concerns from businesses about the obligation to immediately register and pay the applicable fees by delaying the registration obligation until 2027.

The Bottom Line

  • Vermont and New Jersey have enacted significant new data broker legislation, imposing registration requirements, disclosure obligations, and substantial penalties on businesses that collect and sell consumer personal data without a direct relationship.
  • Vermont substantially expands its existing data broker registration framework with broadened definitions, enhanced purchaser credentialing requirements, a new security breach notice regime, and a mandate to study a California-style accessible deletion mechanism.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

California Signs Landmark Online Child Safety Package

California has enacted the nation's most comprehensive online child safety legislation, banning addictive social media features for minors under 16, establishing strict companion chatbot regulations, and imposing enhanced civil penalties for platforms that harm children. Companies operating social media platforms or chatbots accessible to California children must now assess their products, audit features, and prepare compliance programs ahead of the laws' effective dates.
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

California Becomes Second State To Require Disclosure Of Synthetic Performers In Advertising

California joins New York in mandating disclosure when AI-generated synthetic performers appear prominently in advertisements, establishing specific language requirements and broad enforcement mechanisms. The law creates new compliance obligations for advertisers, agencies, and media platforms while introducing nuanced differences from New York's framework. With the January 2027 effective date approaching, businesses must implement tracking systems and disclosure procedures to navigate this expanding regula
United StatesMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

EU AI Act Guidance Expands AI Disclosure Rules For Advertisers And PR Teams

The European Union's AI Act introduces sweeping transparency requirements for AI-generated content, fundamentally redefining what constitutes a "deep fake" and imposing disclosure obligations that extend far beyond traditional understanding. With enforcement beginning August 2, 2026, companies using AI to create advertising, marketing materials, or public communications must navigate complex compliance requirements that may apply even to organizations with no physical presence in Europe.
European UnionMedia, Telecoms, IT, Entertainment
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

NYC’s “Click To Cancel” Rule Is Now In Effect: What Subscription Businesses Need To Know

New York City has become the first U.S. municipality to enforce its own subscription cancellation requirements, creating a new compliance layer for businesses with NYC subscribers. The rule prohibits unreasonable barriers to cancellation and requires companies that enroll consumers in person to offer online cancellation options. With complaint-driven enforcement, per-violation fines up to $3,500, and restitution measured from the first cancellation attempt, businesses must now navigate city-level regulation
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP
Article

FTC Continues Crackdown On Subscription Businesses

The Federal Trade Commission has filed a sweeping complaint against Genesis Tech and related entities, alleging systematic deception in subscription funnels that lure consumers with free or low-cost offers while obscuring auto-renewal terms. The enforcement action signals heightened scrutiny of end-to-end consumer journeys, challenging not just missing disclosures but the overall impression created by quizzes, personalization claims, and pricing language that suggests one-time purchases. What compliance ris
United StatesConsumer Protection
Davis+Gilbert LLP
Davis+Gilbert LLP