The bill S.93, introduced by Senators Chittenden, Beck, Cummings, Mattos, and Ram Hinsdale, seeks to establish the Vermont Data Privacy Act, which aims to enhance data privacy protections for Vermont residents. It introduces a new Chapter 61A to Title 9 of the Vermont Statutes Annotated, defining key terms such as "personal data," "consumer," "controller," and "sensitive data." The legislation outlines consumer rights regarding personal data, including the necessity for clear consent before data processing and conditions for the sale or sharing of personal data. It also sets thresholds for businesses that handle significant amounts of consumer data and emphasizes the protection of sensitive data, particularly health-related information.

Additionally, the bill details the responsibilities of data controllers and processors, mandating compliance with consumer rights and the implementation of security measures to protect personal data. It requires data controllers to respond to consumer requests within a specified timeframe and allows consumers to designate authorized agents for data processing opt-outs. The bill also establishes enforcement mechanisms through the Attorney General, who will address violations and provide a 60-day period for rectification before legal action. Furthermore, it amends the Securities Exchange Act of 1934 to include new definitions and categories of entities subject to its regulations, with an effective date of July 1, 2026, allowing time for compliance adjustments.