United States of America: Adopted Vermont Act relating to enhancing consumer privacy (HB 121) including cybersecurity regulation

On 10 May 2024, the Senate concurred with the House of Representatives's amendments to the Bill for an Act relating to enhancing consumer privacy (HB 121), including cybersecurity regulation. The Bill introduces cybersecurity incident reporting requirements for data brokers, defined as a business which sells or licenses personal information to third parties. In case of a data breach, data brokers are required to notify affected consumers and the state Attorney General.