image credit: Freepik

Mixing Things Up Like a Certain Ice Cream Maker: Vermont Passes Consumer Data Privacy Law

Just past midnight on May 11, 2024, the Vermont Legislature passed H.121, the Vermont Data Privacy Act (VDPA). If signed into law, the VDPA would become the most onerous state comprehensive privacy law in the country. Among other things, the bill contains a private right of action (that will only last from 2027 through 2029), which is leading to some suspense as to whether it will become law. The bill awaits the signature of Vermont Governor Phil Scott, who is said to be considering a veto.

If Governor Scott signs the VDPA, most of its provisions would take effect July 1, 2025, but the private right of action would take effect January 1, 2027.

Read More on National Law Review