An act relating to enhancing consumer privacy

This bill establishes a new Vermont Data Privacy Act to protect the personal information of Vermont residents by creating clear rules for how businesses collect, use, and share consumer data. It defines key terms like personal data, consent, and profiling while explicitly excluding employees and commercial transactions from coverage. The law requires businesses to obtain clear affirmative consent from consumers, prohibits deceptive design practices known as dark patterns, and grants consumers specific rights over their data including access, deletion, and opt-out options. Companies must also implement reasonable security measures to protect personal information and provide mechanisms for consumers to exercise their privacy rights.