Vermont SB-284 is a state data privacy law which protects personally identifiable information. Vermont SB-284 was signed into law May 18, 2006 and became effective January 1, 2007. The law applies to any data collector that owns or licenses unencrypted computerized data that includes personally identifiable information concerning an individual residing in Vermont.

The policy looks for at least one match to personally identifiable information, which may include:

  • Credit Card Number

  • Credit Card Track Data

  • US Drivers License Number

  • US Social Security Number