H 332 creates Vermont's Small Business Technical Assistance Exchange, providing grants and professional support to eligible small and mid-sized Vermont businesses. The program offers up to $5,000 per business for services like business operations, digital strategy, manufacturing upgrades, and legal consulting, administered by regional development corporations. To qualify, businesses must be for-profit, Vermont-based, with at least $5,000 annual revenue, and higher-income owners must provide a 50% match. The Exchange prioritizes outreach to rural businesses and historically marginalized groups, including Black, Indigenous, and People of Color Vermonters, New Americans, and others. Annual reports on program performance are required, with funding of $1.25 million appropriated for fiscal year 2026.
Tags
Small Business
This bill (H 211) requires data brokers in Vermont to notify consumers if their personal information is involved in a security breach, certify that data is used for legitimate purposes, and provide an accessible way for consumers to request deletion of their information. It directly affects Vermont residents whose personal data is collected and sold by businesses without a direct customer relationship (e.g., companies selling addresses, phone numbers, or biometric data). Key provisions define "data brokers" narrowly to exclude businesses with direct customer ties (like retailers or employers) and clarify that publicly available business information isn’t covered. The bill aims to strengthen protections for consumer data by adding specific obligations for brokers handling sensitive information like Social Security numbers or biometric identifiers.
This bill requires Vermont internet service providers to offer affordable broadband service to low-income households starting October 2025. It defines "affordable" as 25 Mbps for $15/month (including fees) or 200 Mbps for $20/month, targeting households qualifying for federal Lifeline or Vermont's Home Heating Fuel Assistance Program. Providers must report on service availability, customer eligibility verification, and pricing annually, while the Public Utility Commission will adjust prices for inflation and review speed standards every five years. Small providers serving under 20,000 customers may be exempt if compliance would cause financial hardship.
This Vermont bill (S 70) requires data brokers - businesses that collect and sell personal information about consumers without a direct relationship (like a customer or employee) - to take specific steps to protect residents' privacy. It mandates that data brokers notify consumers of security breaches involving personal data, certify that data is used for legitimate purposes, and provide an accessible way for consumers to request deletion of their information. The bill directly affects Vermont residents whose personal data is collected by these brokers and sets clear rules for how brokers must handle and protect that information. It does not apply to businesses sharing publicly available business or professional information or those maintaining directory services.
HCR 18 is a ceremonial resolution honoring Vermont's communications union districts (CUDs) for their work bringing fiber-optic broadband to rural areas. It recognizes that CUDs - local entities formed under 2015 law - reduced the number of rural internet addresses with poor service from 100,000 to 20,000 by building infrastructure using municipal bonds and grants without burdening communities. The resolution formally expresses the General Assembly’s appreciation and directs copies to the CUDs, the Vermont Community Development Board, and the Governor. As a procedural resolution, it does not create new policy or funding.
H 356 creates the Unemployment Compensation Benefit Modernization Advisory Committee to advise Vermont's Department of Labor on implementing technological upgrades to the unemployment benefits delivery system. The committee, composed of appointed legislators, Department of Labor staff, labor representatives, employers, and legal aid attorneys, will monitor the upgrades, make recommendations, and assist with testing. It must submit quarterly reports to legislative committees starting September 2025, with the committee dissolving by June 2026 or once the system is fully implemented. This bill directly affects how unemployment benefits are delivered to Vermont workers by establishing a formal advisory process for technology changes.
This Senate resolution urges Vermont state agencies to protect the civil rights, medical confidentiality, and personal privacy of residents diagnosed with autism, in response to federal plans for an autism research database. It specifically addresses concerns that the federal database - collecting medical records and wearable device data - could use sensitive health information without explicit consent. The resolution directs agencies to safeguard this data and references Illinois' similar privacy protections for autism-related information. As a non-binding resolution, it does not create new laws but calls for proactive privacy safeguards.
H.489 adjusts the Vermont state budget for fiscal year 2025 by modifying funding allocations across multiple agencies. It increases total funding for the Judiciary by $2.56 million (primarily through General Fund) and shifts $786,000 from Operating Expenses to Personal Services for the Agency of Digital Services. The bill also raises Human Services funding by $841,000, including a $4.3 million increase in the Global Commitment fund, while reducing Public Safety Criminal Justice Services funding by $681,000. These changes directly affect state agencies managing digital infrastructure, courts, public safety, and human services programs. The bill was vetoed by the Governor on April 4, 2025, and did not become law.
H.360 establishes privacy protections for Vermont residents using mobile identification, such as digital driver's licenses or nonmobile credentials. It requires mobile ID systems to let users share only necessary information (e.g., age verification without revealing full birthdate) and obtain explicit consent before disclosing any data. The bill prohibits businesses from forcing mobile ID use for services unless legally required (like age checks for alcohol sales) and mandates that verification systems cannot store, link, or share data about ID checks. These rules apply to the Department of Motor Vehicles and all entities using mobile ID verification.
Vermont's S.71, the Vermont Data Privacy Act, creates new rules for businesses handling personal data of Vermont residents. It requires businesses to obtain clear, affirmative consent (not dark patterns or broad terms) before collecting personal data, with special protections for sensitive information like reproductive health, gender-affirming care, and precise location data (within 1,750 feet). The law prohibits using geofencing to track individuals near sensitive locations like abortion clinics or mental health facilities. It directly affects all businesses processing personal data of Vermont residents, including tech companies, retailers, and health services, by mandating transparency and restricting how they can use or share consumer information.
