On May 24, 2018, Vermont's attorney general issued a press release discussing a new law establishing a registry and security standards for commercial entities that buy and sell consumer data. As outlined in the release, the law contains four goals: (i) eliminating fees; (ii) protecting consumers from fraud; (iii) clarifying minimum data security requirements; and (iv) providing transparency to consumers.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.