Vermont Strengthens Data Broker Law

On June 16, 2026, Governor Phil Scott signed Vermont H.211, amending the state's data broker registration law. When Vermont enacted its original law in 2018, it was the first of what has since become a growing trend of state data broker statutes – five enacted to date, overlapping in some ways and diverging in others. This recent amendment stops short of establishing a deletion right mechanism like have California and Connecticut laws, but adds major substance and teeth to what was previously a fairly modest registration regime. The amended law takes effect January 1, 2027. 

New Definition, New Scope

The basic framework remains the same: a business that knowingly collects and sells or licenses personal information about consumers with whom it has no direct relationship must register with the Secretary of State. But Vermont has now tightened its definition of “direct relationship” such that a consumer must intentionally interact with a business for purpose of accessing, purchasing,