Who must Comply with the Vermont Data Privacy Act (“VDPA”)?
The law applies to a person that conducts business in this State or a person that produces products or services that are targeted to residents of this State and that during the preceding calendar year:
(1) Controlled or processed the personal data of not fewer than 25,000 consumers, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or
(2) Controlled or processed the personal data of not fewer than 12,500 consumers and derived more than 25 percent of the person’s gross revenue from the sale of personal data.
These materials were obtained directly from the State Government public websites and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.