A new Vermont law enforcing data security and annual disclosure obligations on data brokerage companies (e.g., Acxiom, Experian, Epsilon) came into effect on January 1, 2019. Data brokers are required to register annually with the Vermont Attorney General and pay an annual registration fee. Annually, data brokers must release information regarding practices related to the collection, storage and sale of personal information, applicable opt-out practices (if any) and the number of data breaches experienced during the prior year along with the total number of consumers affected by such breaches (if known) to the State Attorney General. If brokers do not comply with the new laws, they could be considered in violation of Vermont's consumer protection law. To read more on the new law, visit our AdLaw By Request blog.
This article is presented for informational purposes only and is not intended to constitute legal advice.