AP News: Vermont Legislature passes one of the strongest data privacy measures in the country 

The bill prohibits the sale of sensitive data, such as social security and drivers’ license numbers, financial or health information. It also sets meaningful limits on the amount of personal data that companies can collect and use, according to the nonprofit Electronic Privacy Information Center based in Washington, D.C. 

More than a dozen states have comprehensive data privacy laws. Vermont’s is “among the strongest, if not the strongest” in the country, said Caitriona Fitzgerald, deputy director of EPIC. 

State Rep. Monique Priestley, a Democrat and a sponsor of the bill, told colleagues Friday night that without thoughtful and comprehensive measures, gaps can be exploited, undermining the protections legislators were seeking. 

“At a time when everything we do and everything we are is monetized in a surveillance economy, the urgency of this moment cannot be overstated,” she said, according to EPIC. 

A big step in the legislation is allowing consumers to sue, which Fitzgerald said has been the most effective way to ensure that companies comply with privacy laws. State attorneys general do not have the resources to enforce these privacy regulations, Fitzgerald said. 

Read more here.