An act relating to data loyalty

Vermont's H.812, the "Vermont Duty of Data Loyalty Act," requires businesses (called "covered entities") to handle consumer personal data responsibly by limiting how they store, share, or sell it. It directly affects Vermont consumers and businesses that collect personal data, excluding small businesses, government agencies, and employee data from its scope. Key provisions define "covered data" (information identifying individuals), prohibit selling data for cross-context behavioral advertising without consent, and create a "duty of data loyalty" for covered entities. The law aims to strengthen privacy protections by regulating data practices while specifying what data types and business types are excluded from coverage.