Vermont Data Privacy and Online Surveillance Act 2415e-c1: 9 V.S.A. § 2415e(c)(1) Privacy notice with nine contents, including large language model training

A controller must provide a reasonably accessible, clear and meaningful privacy notice stating the categories of data processed, the purposes and a description of processing, how to exercise and appeal rights, categories of data sold and of third parties buying it, a clear and conspicuous disclosure of targeted advertising and of sale for targeted advertising, an active email address or online contact, whether it collects, uses or sells personal data to train large language models, and the month and year of the last update.