According to local news coverage, #Vermont Governor Phil Scott, a Republican, mulling whether to veto the state’s #privacylegislation, concerned about the #PRA being used to file frivolous lawsuits. #privacylaws https://lnkd.in/eCTMtDqP
#Vermont #Privacylaw awaits the governor’s signature (and lots of us frequently refreshing the legislature’s page for the final published language set to be released sometime today). In the interim, Joe Duball spoke with some of the key legislators and provides helpful insights on some of the unique implications of this bill including: Scope of the #PRA as to large data holders (does this end up being most enterprises?) and data brokers including for selling or even processing sensitive PI. Consumer health data and political affiliation are sensitive PI and subject to the PRA #dataminimization requirements Special treatment for pseudonymous PI There’s also emphasis on holding processors responsible when their processing looks like controller activities and diligence/accountability expectations (as we’ve seen more of in the state laws) And of course more controls on data brokers, kids/teen data. Kelley Drye Advertising Law Kelley Drye & Warren LLP https://lnkd.in/e53A6PmF
