Resources / AI Laws by State / Vermont
Privacy law with profiling rules
Vermont AI and Privacy Laws
Vermont has no broad AI law.
What the law says
The Vermont Data Privacy and Online Surveillance Act, signed June 16, 2026 and effective January 1, 2028, has one of the lowest applicability thresholds in the country, requires privacy notices to say whether personal data is used to train large language models, gives consumers human review and appeal rights for profiling decisions, and bans selling teens’ data or using it for targeted advertising.
The Age-Appropriate Design Code Act takes effect January 1, 2027.
Key dates
| Date | What takes effect | Status |
|---|---|---|
| Age-Appropriate Design Code Act | Upcoming | |
| Vermont Data Privacy and Online Surveillance Act | Upcoming |
What this means for your organization
The main obligations here come from the state’s consumer privacy law. If you use personal data for profiling or automated decisions, review your privacy notice, opt-out and appeal processes, and data protection assessments.
Our 2027 AI Governance Checklist covers the steps most organizations need, and our State AI Law Trackers explain the rules for specific industries.
Other states in this category
See every state on the AI Laws by State map.
This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.