7.1.19

Recently the State of Vermont passed a revised Consumer Protection Act requiring any company collecting, buying, or reselling data, without having a direct relationship with the customer, to comply with stricter standards. The law imposes minimum data security measures, requires all data brokers to register with the attorney general’s office, prohibits using data for discriminatory purpose and prohibits fraudulently obtaining data.. This law is one of the first pieces of legislation attempting to wrangle an open area of online commerce that currently has very little government oversight. We anticipate that other states will soon pass similar registration laws.

Suketa Shah is an attorney in the Firm’s Labor and Employment & Business Litigation Practice Groups. If you have any questions or concerns about this issue or any other matter, please contact Suketa directly at 813-223-1099.