VT S0070

Requires data brokers to notify consumers and the Attorney General within 45 days of discovering a security breach affecting brokered personal information, including details about the incident and categories of data compromised

Mandates the Secretary of State establish an "accessible deletion mechanism" by January 1, 2028, allowing Vermont consumers to submit a single request to delete their personal information from all registered data brokers

Increases annual registration penalties for non-compliant data brokers to $200 per day (up from $50) and adds civil penalties of $25,000 for filing materially incorrect registration information

Requires data brokers to undergo independent third-party compliance audits at least every three years starting December 31, 2030, and to certify that disclosed personal information will be used for legitimate purposes

Establishes a Data Brokers Registry Fund to cover costs of the deletion mechanism, informational website, and enforcement, funded by registration fees and penalties