Vermont holds a unique place in American privacy law: in 2018, it became the first state in the nation to require data brokers to register with the government. Now, with 283 registered data brokers and a proposed \"Delete Act\" making its way through the legislature in 2026, Vermont continues to lead the fight for consumer data protection.
Vermont's Groundbreaking Data Broker Registry
Vermont's data broker law, codified at 9 V.S.A. § 2446, was enacted in 2018 and established the nation's first public registry of data brokers. The law requires any business that knowingly collects and sells or licenses the personal information of consumers with whom it does not have a direct relationship to register with the Vermont Secretary of State.
As of 2026, 283 data brokers are registered in Vermont's searchable database. This registry provides unprecedented transparency into the industry, letting consumers see exactly which companies are buying and selling their personal information.
What the Registry Requires
Registered data brokers must:
- Register annually by January 31 each year and pay a $100 registration fee
- Disclose opt-out procedures so consumers know how to remove their data
- Report data breaches — brokers must disclose the number of security breaches they experienced in the prior year
- Describe credential requirements for purchasers of consumer data
- Implement security standards — administrative, technical, and physical safeguards proportionate to the sensitivity of the data they hold
Why Vermont's Registry Matters
Before Vermont's law, there was no public accounting of which companies were operating as data brokers. The registry revealed the true scale of the industry and inspired California, Oregon, and other states to create their own broker registration requirements. You can search Vermont's data broker registry at the Secretary of State's website.
Vermont's Proposed H.211 Delete Act
In 2026, Vermont is considering H.211, a bill that would dramatically expand consumer protections by creating a universal deletion portal — similar to California's DELETE Act and DROP platform.
What H.211 Would Do
If enacted, the bill would allow Vermont residents to submit a single deletion request that would be sent to all registered data brokers at once. Key provisions include:
- Universal deletion portal — a one-stop platform where consumers can request deletion from all registered brokers simultaneously
- Increased broker fees — the annual registration fee would jump from $100 to $900, funding the portal's operations
- Stronger enforcement — enhanced penalties for non-compliant data brokers
- Automatic re-deletion — periodic automated requests to ensure data doesn't reappear
As of late April 2026, H.211 has passed the Vermont House and been referred to the Senate Committee on Economic Development, Housing and General Affairs. If enacted, it would take effect in July 2026, making Vermont the second state after California to offer a government-backed universal deletion tool.
H.211 Is Not Yet Law
While H.211 has strong momentum, it still needs to pass the Vermont Senate and receive the governor's signature. The legislative session runs through mid-May 2026. Until it becomes law, Vermont residents must still opt out of each data broker individually — or use a service like PrivacyOn to automate the process.
Your Privacy Rights in Vermont
Even without a comprehensive consumer privacy act like those in California or Virginia, Vermont residents benefit from several important protections:
Data Broker Opt-Out Rights
Because registered data brokers must disclose their opt-out procedures, Vermont residents can request removal of their data from any registered broker. The Secretary of State's registry is the best starting point to identify brokers that may have your information.
Vermont's Security Breach Notice Act
Vermont law (9 V.S.A. § 2435) requires businesses to notify consumers promptly when their personal information is compromised in a data breach. The law covers Social Security numbers, driver's license numbers, financial account information, and other sensitive data.
Financial Privacy Protections
Vermont has strong financial privacy regulations that limit how financial institutions can share consumer data with third parties. Vermont residents have the right to opt out of information-sharing by financial companies.
Social Security Number Protection
Vermont law restricts the use and display of Social Security numbers by businesses, prohibiting companies from publicly posting SSNs or requiring them as general identification.
How to Protect Your Data in Vermont
Here's a step-by-step approach for Vermont residents who want to take control of their personal data:
- Search the data broker registry — Visit the Vermont Secretary of State's website and review the list of 283+ registered data brokers to understand who may have your data
- Submit opt-out requests — Use the disclosed opt-out procedures for each broker. Start with major people-search sites like Spokeo, BeenVerified, and Whitepages
- Freeze your credit — Contact Equifax, Experian, and TransUnion to place security freezes on your credit reports
- Use the Global Privacy Control — Install a browser that supports GPC (like Firefox or Brave) to automatically signal opt-out preferences to websites you visit
- Monitor for re-listing — Data brokers often re-acquire your information within months. Regular monitoring is essential
Why Manual Opt-Outs Aren't Enough
With 283 registered brokers in Vermont alone — and hundreds more operating nationally — manually opting out of each one is a monumental task. Each broker has its own process, some requiring postal mail, others requiring photo ID uploads, and many taking weeks to process requests. Worse, brokers frequently re-collect your data from public records, social media, and other sources.
This is where automated data removal services become essential. PrivacyOn monitors 100+ major data brokers on your behalf, submitting removal requests automatically and continuously checking for your data to reappear. With 24/7 monitoring, dark web scanning, and family plans covering up to 5 people, it's the most efficient way for Vermont residents to exercise their privacy rights at scale.
What's Coming Next
Vermont's privacy landscape is evolving rapidly. If H.211 passes, the state will join California in offering a government-backed deletion tool — a major win for consumers. Meanwhile, the existing data broker registry continues to grow and provide transparency that benefits residents nationwide.
Whether you're waiting for H.211 or ready to take action now, the key is to start. Review the data broker registry, submit your first opt-out requests, and consider an automated service like PrivacyOn to keep your personal information protected over the long term.