Vermont Tightens Data Rules
Vermont has signed a bill establishing new requirements for businesses collecting personal information
Vermont has taken a significant step towards strengthening data protection for its residents with the signing of the Vermont Data Privacy and Online Surveillance Act, also known as state Senate bill S.71, by Governor Phil Scott on Tuesday. This new law establishes stricter requirements for businesses that collect, process, use, and sell personal information belonging to Vermont residents, bringing the state's data privacy regulations more in line with those of the European Union's General Data Protection Regulation and the California Consumer Privacy Act.
The move is seen as a response to the growing concern over data breaches, which have exposed the personal information of hundreds of millions of people across the United States, according to the Data Breach Chronology compiled by the Privacy Rights Clearinghouse. Since 2005, over 75,000 reported breaches have been documented, affecting individuals, businesses, and entire industries. The economic impact of these breaches is substantial, with the average cost of a data breach in the United States estimated to be in the millions of dollars.
As the data analytics industry continues to evolve, companies like Databricks are expanding their cybersecurity capabilities, with the recent acquisition of startup Panther Labs. However, the lack of quantum-resistant encryption in older systems remains a concern, as highlighted by France's cybersecurity agency ANSSI, which has announced that it will stop certifying security products that do not meet this standard. This move is expected to force government bodies and critical operators to shift away from older systems, which could have significant implications for data protection.
The Vermont Data Privacy and Online Surveillance Act is part of a broader trend towards stronger data protection regulations, with India's DPDPA, introduced in 2023, being the newest major framework. While the Indian law covers 1.4 billion citizens, it has a narrower scope than the GDPR, with no right to data portability and limited restrictions on government access. In contrast, the Vermont law provides stronger protections for residents, including stricter requirements for businesses that collect and process personal data.
The signing of the Vermont Data Privacy and Online Surveillance Act is seen as a significant step towards protecting the personal information of Vermont residents. As state and local governments become increasingly important sources of government data, the need for strong legal, ethical, and privacy protections is becoming more pressing. The Center for Democracy and Technology has highlighted the importance of inclusive data practices, particularly with regards to sexual orientation and gender identity data, which requires strong governance and protections to ensure that the benefits of inclusive data are realized.
The new law is expected to have far-reaching implications for businesses that operate in Vermont, and its impact will be closely watched by other states and countries as they consider their own data protection regulations. With the average cost of a data breach estimated to be in the millions of dollars, the economic benefits of stronger data protection regulations are clear. As the data analytics industry continues to evolve, the need for stronger protections for personal information will only continue to grow.
As I consider the recent developments in Vermont's data rules, I firmly believe that stricter regulations are necessary to protect consumers. Vermont Tightens Data Rules is a step in the right direction, but more needs to be done. If nothing changes, large corporations will continue to win, exploiting personal data for their own gain without consequence. These companies will reap the benefits of unchecked data collection, while individuals are left vulnerable to privacy breaches and targeted manipulation. It is imperative that we prioritize data protection and hold these corporations accountable to ensure a safer digital landscape for all.
Cross-reference independently — do not take our word for it.
Disclosure: NewsAnarchist uses AI-assisted reporting with web search. Always verify primary sources linked above.
This article is produced by NewsAnarchist's AI reporting system, not a human staff reporter. It's built from the primary source cited above (a declassified document, a FOIA release, an inspector general or congressional report, or a named whistleblower disclosure reported by outlets we cite) and reports what that source states, attributed to it — it reports what the document or disclosure states and does not speculate about what remains classified beyond that. Part of our Government Secrets hub. Found an error? Tell us.