United States of America: Passed Vermont Act relating to enhancing consumer privacy (HB 121) including cybersecurity regulation

On 22 March 2024, a Bill for an Act relating to enhancing consumer privacy (HB 121), including cybersecurity regulation, was passed by the House of Representatives of the State of Vermont. The Bill would introduce cybersecurity incident reporting requirements for data brokers, defined as a business which sells or licenses personal information to third parties. In case of a data breach, data brokers are required to notify affected consumers and the state Attorney General.