VT S0093

Creates the Vermont Data Privacy Act establishing consumer rights to access, correct, delete, and obtain copies of their personal data, plus the right to opt out of targeted advertising, data sales, and automated profiling

Applies to businesses that process personal data of at least 100,000 Vermont consumers, or 25,000 consumers if deriving more than 25% of gross revenue from data sales

Requires consumer consent before processing sensitive data including health information, biometric data, precise geolocation, data revealing race/ethnicity/religion, and data from children under 13

Prohibits using geofencing within 1,750 feet of health care facilities to collect consumer health data, and bars selling consumer health data without explicit consent

Enforced exclusively by the Attorney General with a 60-day cure period for violations through December 31, 2026; effective date July 1, 2026