Vermont Amends Data Breach Notification Law

Vermont Amends Data Breach Notification Law

Why This Privacy Law is Important:

On July 1, 2020, amendments to Vermont’s Security Breach Notice Act went into effect. This now includes an expanded definition of Personally Identifiable Information (“PII”). The definition now adds various ID numbers, unique biometric data, genetic information, and certain health or wellness records.


Prior to the amendment, Vermont’s data breach notification statute defined “personally identifiable information” (PII) as a consumer’s first name, last name in combination with a Social Security number, driver’s license or other identification card number, financial account number or debit card number, and account passwords or other access codes pertaining to a financial account.This amendment now expands the definition of PII to include numbers originating from government identification documents, genetic information, and health or wellness program records.

    Download the Privacy Alert to the right to get the full text and expert analysis!

    Download the Resource