Eric Noll of the Center for Democracy & Technology urged the committee to move beyond notice‑and‑consent, add AG rulemaking and civil penalty authority, and consider private right of action and AI safeguards to prevent data repurposing for model training.

Legislative counsel presented draft 3.3 of S.71, detailing changes to definitions (collect, consent, processor), removal/realignment of advertising terms, HIPAA exemptions for hybrid entities, a California‑style 'reasonable expectations' data‑minimization standard, and NIST security‑framework requirements.

Witnesses told the committee that weak government enforcement, limited budgets and political constraints undermine privacy laws, and urged consideration of a private right of action and stronger remedies to deter violations.

At a joint House–Senate hearing, privacy scholars and industry witnesses told legislators Vermont should adopt privacy laws that limit collection and include meaningful enforcement, arguing notice‑and‑choice has failed and that strong rules will help counter AI risks and data‑driven harms.

New Jersey, Oregon, and Massachusetts implement privacy act revisions targeting sensitive data protections.

Senate discusses privacy issues regarding access to sealed records in legislative proposal.

Senator Kloske introduces S-150 to protect data from mobile identification and traffic enforcement.

S.150 restricts access to mobile identification and protects user privacy rights.