Vermont Enhances Breach Notification and Student Protections
Effective July 1, 2020, breach notification requirements are expanded (to include breaches of biometric, genetic, health data, various government identifiers, and online login credentials), and school website operators must comply with prohibitions for student data use, disclosure and advertising, be transparent about data handling practices, and apply reasonable security measures to protect it. S-011 directs the State to conduct a privacy audit concerning the collection and use of citizens’ data. Adopt a student online privacy protection act; expands the definition of personally identifiable information subject to the Security Breach Notice Act and ensures consumer notice of a data breach; and requires internet service providers to provide notice concerning the potential sharing of private data.
