On October 31, 2017, the New York and Vermont Attorneys General announced a settlement with Hilton Domestic Operating Company, Inc., to settle allegations that the company lacked reasonable data security and waited too long to report a pair of 2015 data breaches, which exposed over 350,000 credit card numbers.
Continue Reading Hilton Agrees to Settle Data Breach-Related Claims by NY and VT Attorneys General

On September 29, 2017, North Carolina-based technology company Samanage USA, Inc. agreed to a $264,000 settlement with the Vermont Attorney General in relation to a breach that exposed the Social Security numbers of 660 Vermont Health Connect users.
Continue Reading Samanage USA, Inc. Agrees to Pay to Settle Vermont AG’s Data Security Investigation

On December 14, 2016, the FTC announced that the operators of the AshleyMadison.com website have settled with the FTC and a coalition of state regulators over charges that the companies deceived consumers and failed to protect users’ personal information.
Continue Reading FTC Settles with Operators of AshleyMadison.com Over Security and Privacy Practices

On September 8, Vermont Attorney General William Sorrell announced that SEI/Aaron’s, Inc. has entered into an assurance of discontinuance to settle charges over the company’s remote monitoring of its customers’ leased laptops.
Continue Reading Vermont Attorney General Reaches Settlement with Aaron’s Franchisee Over Unlawful Debt Collection Practices

On June 1, 2012, the Vermont Attorney General announced a series of recent legislative initiatives including amendments to Vermont’s breach notification law that redefine security breach, add a 45-day timing requirement for notifying affected consumers and mandate notification to the state Attorney General.
Continue Reading Vermont Attorney General Announces Amendments to Security Breach Notification Law

On June 23, 2011, in a 6-3 decision, the United States Supreme Court ruled in IMS Health Inc. v. Sorrell that a Vermont law that prohibited the sale of prescriber-identifiable data to drug companies was an unconstitutional violation of the First Amendment right to free speech.

Continue Reading Supreme Court Strikes Down Vermont Prescriber Privacy Law