The Vermont legislature has passed one of the strongest data privacy measures in the country, aimed at cracking down on companies’ use of online personal data
The Democrat-controlled Vermont legislature has passed one of the strongest data privacy measures in the country aimed at cracking down on companies' use of online personal data, which would let consumers file civil lawsuits against companies that break certain privacy rules.
However, Republican Gov. Phil Scott has concerns about how part of the legislation could affect small businesses. He hasn't seen the final bill that passed early Saturday before the Legislature adjourned. He will make a decision once he's had a chance to review it, his spokesperson Jason Maulucci said Tuesday.
The bill prohibits the sale of sensitive data, such as social security and drivers’ license numbers, financial or health information. It also sets meaningful limits on the amount of personal data that companies can collect and use, according to the nonprofit Electronic Privacy Information Center based in Washington, D.C.
More than a dozen states have comprehensive data privacy laws. Vermont's is “among the strongest, if not the strongest" in the country, said Caitriona Fitzgerald, deputy director of EPIC.
State Rep. Monique Priestley, a Democrat and a sponsor of the bill, told colleagues Friday night that without thoughtful and comprehensive measures, gaps can be exploited, undermining the protections legislators were seeking.
“At a time when everything we do and everything we are is monetized in a surveillance economy, the urgency of this moment cannot be overstated," she said, according to EPIC.
A big step in the legislation is allowing consumers to sue, which Fitzgerald said has
Read more on abcnews.go.com