Cybersecurity Policy Report, Consumer Data Privacy Bill on Agenda in Vermont, (Feb 22, 2023)
The Vermont state House Committee on Commerce and Economic Development meets tomorrow to take up a bill that would give consumers certain rights regarding the collection of their personal information.
According to HB 121, on or after July 1, a data collector or broker that processes data for the purposes of targeted advertising, predictive analytics, tracking, or the sale of personal information must allow consumers to exercise the right to opt out of the processing of personal information concerning the consumer “through a user-selected universal opt-out mechanism that meets the technical specifications established by the attorney general.”
A consumer may also request that a data broker stop collecting the consumer’s data; delete all data in its possession about the consumer; or stop selling the consumer’s data. Consumers would also be able to request that all data brokers registered with the state honor an opt-out request by filing the request with the secretary of state. The bill directs the secretary of state to develop an online form to facilitate the general opt-out by a consumer and maintain a “Data Broker Opt-Out List” of consumers who have requested a general opt-out. The bill specifies that data contained in the Data Broker Opt-Out List not be used for any purpose other than to effectuate a consumer’s opt-out request.
The bill requires a data broker to establish a simple procedure for consumers to submit such a request and must comply with such a request from a consumer within 10 days of receiving such a request.
The bill would further require a data broker that experiences a security breach to notify the affected consumers and the state attorney general. The bill provides that “notice of the security breach shall be made in the most expedient time possible and without unreasonable delay, but not later than 45 days after the discovery or notification, consistent with the legitimate needs of the law enforcement agency.”
According to the bill, the attorney general has the “sole and full authority to investigate potential violations of this subchapter and to enforce, prosecute, obtain, and impose remedies for a violation of this subchapter or any rules or regulations made pursuant to this chapter.”
The bill is sponsored by Reps. Michael Marcotte (R.) and Jim Carroll (D.).
News: StateLegislation DataPrivacy