State Breach Law
Vermont Data Breach Notification Law
9 V.S.A. §§ 2430, 2435 • Effective 2007-01-01
Vermont gives you 45 days to notify affected residents. AG notification also required.
Notification deadline: 45 days
Enforcement: Vermont Attorney General
Overview
Vermont requires notification within 45 days of breach discovery. Also has data broker registration.
Who Must Be Notified
- • Affected Vermont residents
- • Vermont Attorney General
Covered Data Types
Social Security number, Driver's license number, Financial account numbers, Account passwords, Biometric data
Notification Requirements
- • Written notice
- • Must include breach description
Is your business exposed?
Exemptions
- • Encrypted data
- • Good faith acquisition
Penalties
Consumer Protection Act violations, up to $10,000 per violation
If You Experience a Breach
- 1.
Notify AG and residents within 45 days
Official Source
https://ago.vermont.gov/Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required