Regulations library · US states
VDPOSA
Vermont Data Privacy and Online Surveillance Act
Enacted, not yet in force Vermont privacy consumer rights
Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.
At a glance
- Who it applies to
- Businesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.
- Who enforces it
- State Attorney General (no private right of action)
- When
- Takes effect 1 January 2028. 60-day cure period, ending 30 June 2029.
This is a reference entry. The priority laws get a full practical guide first.
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Sources
- 2026 mid-year state privacy law update Venable · Law firm or analyst
- New US state consumer privacy laws: what businesses should know Morgan Lewis · Law firm or analyst
Dates and status checked against these sources on 27 September 2026. This page explains the law for practitioners; it is not legal advice.