Veto In Vermont

Frankfurt Kurnit Klein & Selz


Frankfurt Kurnit provides high quality legal services to clients in many industries and disciplines worldwide. With leading practices in entertainment, advertising, IP, technology, litigation, corporate, estate planning, charitable organizations, professional responsibility and other areas — Frankfurt Kurnit helps clients face challenging legal issues and meet their goals with efficient solutions.
Earlier today, on June 13, 2024, Governor Phil Scott vetoed the Vermont Data Privacy Act (VDPA). Governor Scott cited the "unnecessary and avoidable level of risk"...
United States Privacy
To print this article, all you need is to be registered or login on

Earlier today, on June 13, 2024, Governor Phil Scott vetoed the Vermont Data Privacy Act (VDPA). Governor Scott cited the "unnecessary and avoidable level of risk" that the VDPA's enactment would have created, and noted that the bill would make "Vermont a national outlier, and more hostile than any other state to many businesses." The Vermont legislative session has concluded for the year, so any further efforts to pass another bill must wait until 2025.

The veto of the VDPA is significant because the VDPA would have been the 20th comprehensive privacy law in the U.S. and one of the first to include a private right of action. VDPA's private right of action applied to data brokers and large data holders (a business processing the personal data of 100,000 Vermont residents annually) that handle sensitive data. Washington's My Health My Data – effective March 31, 2024 – and the CCPA gave consumers a right to sue for certain violations related to consumer health data and personal information security breaches, respectively, but neither bill's private right of action would have had the reach of the VDPA.

While the VDPA will not take effect, there are still 19 other comprehensive privacy laws enacted in the U.S., and more under consideration. Additionally, the VDPA's provisions on data minimization and age-appropriate design are indicative of trends in privacy legislation. Companies should expect further comprehensive state privacy laws, and potentially some state laws which include a private right of action.

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More