Vermont Data Privacy and Online Surveillance Act (from January 1, 2028)
Signed in June 2026 and taking effect January 1, 2028. Its consumer health data provisions reach businesses regardless of size, and privacy notices must say whether personal data is used to train large language models. There is no private right of action. Your attorney confirms whether it applies to you.