Vermont Amends Its Data Broker Law: What Do You Need to Know?

Vermont Governor Phil Scott signed Act 138, modifying the state’s data broker law with provisions becoming effective January 1, 2027. The amendments expand the definition of regulated data to encompass substantially all personal information, add new registration disclosures, know-your-customer-style procedures for downstream recipients, and breach notification requirements. Registration fees rise from $100 to $900 with a $20,000 surety bond mandated, and penalties increase to $200/day with no cap for failure to register and $1,000/day for failure to amend registrations.