The demise of Vermont’s data privacy bill

Vermont Legislature passed a first of its kind data privacy law which included a unique private cause of action. H121 (2024 | VT) The Governor’s veto statement reads, “One area of risk comes from the bill’s “private right of action,” which would make Vermont a national outlier, and more hostile than any other state to many businesses and non-profits – a reputation we already hold in a number of other areas. I appreciate this provision is narrow in its impact, but it will still negatively impact mid-sized employers, and is generating significant fear and concern among many small businesses.”