Vermont Data Privacy and Online Surveillance Act

Controller duties, privacy notice and request methods (§ 2415e) – Vermont Data Privacy and Online Surveillance Act

Vermont Data Privacy and Online Surveillance Act 2415e-a1: 9 V.S.A. § 2415e(a)(1) Collection reasonably necessary and proportionate to disclosed purposes

A controller must limit collection of a consumer's personal data to what is reasonably necessary and proportionate to the purposes disclosed for processing it.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Controller duties, privacy notice and request methods (§ 2415e) – Vermont Data Privacy and Online Surveillance Act

2415e-a2 9 V.S.A. § 2415e(a)(2) Consent for any material new purpose
2415e-a3 9 V.S.A. § 2415e(a)(3) Reasonable data security practices
2415e-a4 9 V.S.A. § 2415e(a)(4) Sensitive data only with consent and where reasonably necessary; no sale without consent; children under COPPA
2415e-a5 9 V.S.A. § 2415e(a)(5) No processing in breach of anti-discrimination laws; antibias testing evidence counts
2415e-a6 9 V.S.A. § 2415e(a)(6) Consent revocation as easy as giving it, honoured within 15 days
2415e-a7 9 V.S.A. § 2415e(a)(7) No targeted advertising or sale for consumers aged 13 to 17
2415e-a8 9 V.S.A. § 2415e(a)(8) and (b) No retaliation for exercising rights; loyalty programmes allowed
2415e-a9 9 V.S.A. § 2415e(a)(9) Covered businesses comply with the Vermont Age-Appropriate Design Code for covered minors

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Vermont Data Privacy and Online Surveillance Act controls