An act relating to consumer data privacy and online surveillance

1. **ONE-SENTENCE SUMMARY:** This bill establishes new rules for how businesses handle consumer data and monitor online activities to enhance privacy protections for Vermont residents. 2. **KEY REQUIREMENTS:** - Inform consumers about what personal data is collected and how it is used. - Obtain explicit consent from consumers before collecting or processing their personal data. - Allow consumers to access, correct, and delete their personal data. - Implement reasonable security measures to protect personal data from unauthorized access. - Provide a clear privacy policy on your website detailing data practices. 3. **DEADLINES:** - The bill takes effect on January 1, 2024. - Businesses must be compliant with all requirements by this date. 4. **PENALTIES:** - Fines can reach up to $10,000 per violation. - Consumers can file complaints, leading to potential investigations and enforcement actions by the state. 5. **SMB IMPACT:** Small businesses will need to invest time and resources to update their data handling practices and privacy policies to comply with the new law, which may require legal or technical assistance. Non-compliance could lead to significant fines, making it crucial to prioritize these changes.