Vermont Children's Privacy Laws (2026)

Vermont Age-Appropriate Design Code Act · S.69 (Act 63)

Enacted — not yet effective — Signed into law; its effective date is still in the future. · Design code · effective 2027-01-01 · binds operators

Ages: Minors under 18

Requires: Covered businesses whose online products/features are likely to be accessed by minors must set the highest-privacy settings as default for minors and may not collect, use, sell, or share a minor's personal data unless necessary to provide the service. It restricts profiling and using personal data to prioritize/amplify content for minors, bars push notifications to minors between 12:00 a.m. and 6:00 a.m., and requires a conspicuous signal to a minor when a business permits another person to monitor the minor's activity or location.

Litigation: No suit or injunction is currently in effect against Vermont's AADC. NetChoice opposed S.69 on First Amendment grounds (citing NetChoice v. Bonta on California's CAADCA), but as of 2026-06-28 no court challenge to the Vermont statute has been filed or enjoined.

Vermont Data Privacy and Online Surveillance Act — minors' provisions · S.71 (Act 145)

Enacted — not yet effective — Signed into law; its effective date is still in the future. · Privacy law (minors) · effective 2028-01-01 · binds operators

Ages: Known minors 13-17; under 13 handled per COPPA

Requires: For consumers the controller knows or willfully disregards are minors aged 13 to 17, the controller is prohibited from selling their personal data or processing it for targeted advertising. Controllers that qualify as 'covered businesses' must also comply with the Vermont Age-Appropriate Design Code Act for 'covered minors,' and personal data of children under 13 must be processed in accordance with COPPA. Profiling that produces legal or similarly significant effects is restricted. Enforced exclusively by the Vermont Attorney General.