{ "batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "articles": [ { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_ancho", "category": "Safety", "title": "[Unverified - being checked] Vermont Statutes Online: Title 9 chapter 062 heading (anchor)", "summary": "[Unverified - being checked] The Vermont General Assembly's official Vermont Statutes Online publishes 9 V.S.A. chapter 62 under the heading quoted. Subchapter 6 of chapter 62 is the Vermont Age-Appropriate Design Code Act, effective January 1, 2027.", "body": "The Vermont General Assembly's official Vermont Statutes Online publishes 9 V.S.A. chapter 62 under the heading quoted. Subchapter 6 of chapter 62 is the Vermont Age-Appropriate Design Code Act, effective January 1, 2027.\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n“Chapter 062 : Protection of Personal Information”\n\nNote: Anchor record: the legislature's own statute site, legislature.vermont.gov (state domain).", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/chapter/09/062", "last_verified": "2026-10-19", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "Chapter 062 : Protection of Personal Information", "volatility": "low", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont Statutes Online", "topic": "Title 9 chapter 062 heading (anchor)", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_aadc_", "category": "Safety", "title": "[Unverified - being checked] 9 V.S.A. § 2449i: Limitation: no liability inconsistent with 47 U.S.C. 230", "summary": "[Unverified - being checked] 9 V.S.A. 2449i: nothing in the subchapter shall be construed to impose liability inconsistent with 47 U.S.C. 230 or to prevent a covered minor from deliberately searching for or requesting any media.", "body": "9 V.S.A. 2449i: nothing in the subchapter shall be construed to impose liability inconsistent with 47 U.S.C. 230 or to prevent a covered minor from deliberately searching for or requesting any media.\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n“Nothing in this subchapter shall be interpreted or construed to: (1) impose liability in a manner that is inconsistent with 47 U.S.C. § 230; or (2) prevent or preclude any covered minor from deliberately or independently searching for, or specifically requesting, any media.”\n\nNote: 47 U.S.C. 230 is named in the Vermont statute's own text; it is cited here only because the Vermont section cites it.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449i", "last_verified": "2026-10-19", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "Nothing in this subchapter shall be interpreted or construed to: (1) impose liability in a manner that is inconsistent with 47 U.S.C. § 230; or (2) prevent or preclude any covered minor from deliberately or independently searching for, or specifically requesting, any media.", "volatility": "medium", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "9 V.S.A. § 2449i", "topic": "Limitation: no liability inconsistent with 47 U.S.C. 230", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_cover", "category": "Safety", "title": "[Unverified - being checked] 9 V.S.A. § 2449a: Covered business defined", "summary": "[Unverified - being checked] 9 V.S.A. 2449a(10): a covered business is a sole proprietorship, partnership, LLC, corporation or other entity that conducts business in Vermont, generates a majority of its annual revenue from online services, offers products reasonably likely to be accessed by a minor, collects consumers' personal data, and determines the purposes and means of processing it.", "body": "9 V.S.A. 2449a(10): a covered business is a sole proprietorship, partnership, LLC, corporation or other entity that conducts business in Vermont, generates a majority of its annual revenue from online services, offers products reasonably likely to be accessed by a minor, collects consumers' personal data, and determines the purposes and means of processing it.\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n““Covered business” means a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof: (A) that conducts business in this State; (B) that generates a majority of its annual revenue from online services; (C) whose online products, services, or features are reasonably likely to be accessed by a minor; (D) that collects consumers’ personal data or has consumers’ personal data collected on its behalf by a processor; and (E) that alone or jointly with others determines the purposes and means of the processing of consumers”\n\nNote: A sole proprietorship can be a covered business, but only if all five conditions are met, including that its online products are reasonably likely to be accessed by a minor and that it collects consumers' personal data. A creator selling through someone else's platform and not collecting data themselves would not meet (D) and (E) on these words alone.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449a", "last_verified": "2026-10-19", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "“Covered business” means a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof: (A) that conducts business in this State; (B) that generates a majority of its annual revenue from online services; (C) whose online products, services, or features are reasonably likely to be accessed by a minor; (D) that collects consumers’ personal data or has consumers’ personal data collected on its behalf by a processor; and (E) that alone or jointly with others determines the purposes and means of the processing of consumers", "volatility": "medium", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "9 V.S.A. § 2449a", "topic": "Covered business defined", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_age_a", "category": "Safety", "title": "[Unverified - being checked] 9 V.S.A. § 2449a: Age assurance defined", "summary": "[Unverified - being checked] 9 V.S.A. 2449a(2): age assurance encompasses a range of methods used to determine, estimate, or communicate the age or an age range of an online user.", "body": "9 V.S.A. 2449a(2): age assurance encompasses a range of methods used to determine, estimate, or communicate the age or an age range of an online user.\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n““Age assurance” encompasses a range of methods used to determine, estimate, or communicate the age or an age range of an online user.”", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449a", "last_verified": "2026-10-19", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "“Age assurance” encompasses a range of methods used to determine, estimate, or communicate the age or an age range of an online user.", "volatility": "medium", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "9 V.S.A. § 2449a", "topic": "Age assurance defined", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "failed", "label": "Unverified - being checked", "reasons": [ "hollow_body", "strong_label_on_weak_content" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_age_p", "category": "Safety", "title": "[Unverified - being checked] 9 V.S.A. § 2449g: Age assurance privacy duties", "summary": "[Unverified - being checked] 9 V.S.A. 2449g(a): during age assurance, covered businesses and processors must collect only personal data strictly necessary, immediately delete it once the user's age range is determined (keeping only the age range), not reuse or combine it, not disclose it to non-processor third parties, and offer an appeal; the Attorney General is to adopt rules on methods by January 1, 2027.", "body": "9 V.S.A. 2449g(a): during age assurance, covered businesses and processors must collect only personal data strictly necessary, immediately delete it once the user's age range is determined (keeping only the age range), not reuse or combine it, not disclose it to non-processor third parties, and offer an appeal; the Attorney General is to adopt rules on methods by January 1, 2027.\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n“During the process of conducting age assurance, covered businesses and processors shall: (1) only collect personal data of a user that is strictly necessary for age assurance; (2) immediately upon determining whether a user is a covered minor, delete any personal data collected of that user for age assurance, except the determination of the user’s age range; (3) not use any personal data of a user collected for age assurance for any other purpose; (4) not combine personal data of a user collected for age assurance, except the determination of the user’s age range, with any other personal data of the user; (5) not disclose personal data of a user collected for age assurance to a third party that is not a processor; and (6) implement a review process to allow users to appeal their age determination.”\n\nNote: The subchapter regulates how age assurance data is handled; it does not by this text require a covered business to verify every visitor's age.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449g", "last_verified": "2026-10-19", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "During the process of conducting age assurance, covered businesses and processors shall: (1) only collect personal data of a user that is strictly necessary for age assurance; (2) immediately upon determining whether a user is a covered minor, delete any personal data collected of that user for age assurance, except the determination of the user’s age range; (3) not use any personal data of a user collected for age assurance for any other purpose; (4) not combine personal data of a user collected for age assurance, except the determination of the user’s age range, with any other personal data of the user; (5) not disclose personal data of a user collected for age assurance to a third party that is not a processor; and (6) implement a review process to allow users to appeal their age determination.", "volatility": "medium", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "9 V.S.A. § 2449g", "topic": "Age assurance privacy duties", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_448_vermont_age_verification_as_it_lands_on_a_creator_no_po", "category": "Safety", "title": "[Unverified - being checked] No Vermont statute requires age verification for adult websites", "summary": "[Unverified - being checked] No section of the 9 V.S.A. chapter 62 index or of 13 V.S.A. chapter 63 imposes a duty to verify visitors' ages on sites publishing sexual content; Vermont's obscenity chapter reaches distribution only where the sender has actual knowledge that the recipient is a minor (13 V.S.A. 2802a).", "body": "No section of the 9 V.S.A. chapter 62 index or of 13 V.S.A. chapter 63 imposes a duty to verify visitors' ages on sites publishing sexual content; Vermont's obscenity chapter reaches distribution only where the sender has actual knowledge that the recipient is a minor (13 V.S.A. 2802a).\n\nWhat Vermont General Assembly (Vermont Statutes Online) actually says:\n\n“Title 13 : Crimes and Criminal Procedure Chapter 063 : Obscenity”\n\nNote: ABSENCE RECORD (inferred from an index/listing or page that does not mention it, not from operative text). Read the 9 V.S.A. chapter 62 index and the 13 V.S.A. chapter 63 text on 2026-10-19; searched the Title 9 and Title 13 chapter indexes for 'age verification' headings. Searched only those titles; pending bills (for example a social media age-verification bill) were not read from the legislature site and are not statutes.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/chapter/13/063", "last_verified": "2026-10-19", "reliability": "CREATOR STRATEGY", "source_tier": "A", "source_publisher": "Vermont General Assembly (Vermont Statutes Online)", "evidence_quote": "Title 13 : Crimes and Criminal Procedure Chapter 063 : Obscenity", "volatility": "medium", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont adult-site age-verification statute", "topic": "No Vermont statute requires age verification for adult websites", "applies_to_country": "US", "applies_to_scope": "VT", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_aadc_anchor", "category": "Safety", "title": "[Unverified - being checked] Vermont: statutory code index", "summary": "[Unverified - being checked] Vermont's Age-Appropriate Design Code Act is enacted as Subchapter 006 of Title 9, Chapter 62 of the Vermont Statutes (Protection of Personal Information) at 9 V.S.A. § 2449a et seq. and was added by 2025, No. 63, with all sections effective January 1, 2027.", "body": "Vermont's Age-Appropriate Design Code Act is enacted as Subchapter 006 of Title 9, Chapter 62 of the Vermont Statutes (Protection of Personal Information) at 9 V.S.A. § 2449a et seq. and was added by 2025, No. 63, with all sections effective January 1, 2027.\n\nWhat Vermont General Assembly actually says:\n\n“Subchapter 006 : Vermont Age-Appropriate Design Code Act § 2449a. Definitions [Effective January 1, 2027] § 2449b. Exclusions [Effective January 1, 2027] § 2449c. Minimum duty of care [Effective January 1, 2027] § 2449d. Required default privacy settings and tools [Effective January 1, 2027] § 2449e. Transparency [Effective January 1, 2027] § 2449f. Prohibited data and design practices [Effective January 1, 2027] § 2449g. Age assurance privacy [Effective January 1, 2027] § 2449h. Enforcement [Effective January 1, 2027] § 2449i. Limitations [Effective January 1, 2027] § 2449j. Rights and freedoms of covered minors [Effective January 1, 2027]”\n\nNote: Anchor record. From the chapter index listing all sections of subchapter 6 with their effective dates. Each section header shows '(Added 2025, No. 63, § 1, eff. Jan. 1, 2027)'.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/chapter/09/062", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "Subchapter 006 : Vermont Age-Appropriate Design Code Act § 2449a. Definitions [Effective January 1, 2027] § 2449b. Exclusions [Effective January 1, 2027] § 2449c. Minimum duty of care [Effective January 1, 2027] § 2449d. Required default privacy settings and tools [Effective January 1, 2027] § 2449e. Transparency [Effective January 1, 2027] § 2449f. Prohibited data and design practices [Effective January 1, 2027] § 2449g. Age assurance privacy [Effective January 1, 2027] § 2449h. Enforcement [Effective January 1, 2027] § 2449i. Limitations [Effective January 1, 2027] § 2449j. Rights and freedoms of covered minors [Effective January 1, 2027]", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "statutory code index", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "any", "region": [ "us-vt" ], "platform": "any", "topic": [ "unclassified" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_covered_business_definition", "category": "Safety", "title": "[Unverified - being checked] Vermont: statutory code index", "summary": "[Unverified - being checked] Vermont's statute defines 'covered business' as a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof that conducts business in this State, generates a majority of its annual revenue from online services, whose online products are reasonably likely to be accessed by a minor, collects consumers' personal data, and determines the purposes and means of processing.", "body": "Vermont's statute defines 'covered business' as a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof that conducts business in this State, generates a majority of its annual revenue from online services, whose online products are reasonably likely to be accessed by a minor, collects consumers' personal data, and determines the purposes and means of processing.\n\nWhat Vermont General Assembly actually says:\n\n“‘Covered business’ means a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof: (A) that conducts business in this State; (B) that generates a majority of its annual revenue from online services; (C) whose online products, services, or features are reasonably likely to be accessed by a minor; (D) that collects consumers’ personal data or has consumers’ personal data collected on its behalf by a processor; and (E) that alone or jointly with others determines the purposes and means of the processing of consumers’ personal data.”\n\nNote: The definition explicitly includes 'sole proprietorship' - which can encompass an individual creator - meeting elements A, B, C, D, and E. However, the law does not name an 'individual creator' or 'individual seller.'; the definition requires generation of 'majority of annual revenue from online services' and that 'online products, services, or features are reasonably likely to be accessed by a minor.' The statute thus binds entities meeting that definition, not any individual merely posting content through a platform.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449a", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "‘Covered business’ means a sole proprietorship, partnership, limited liability company, corporation, association, other legal entity, or an affiliate thereof: (A) that conducts business in this State; (B) that generates a majority of its annual revenue from online services; (C) whose online products, services, or features are reasonably likely to be accessed by a minor; (D) that collects consumers’ personal data or has consumers’ personal data collected on its behalf by a processor; and (E) that alone or jointly with others determines the purposes and means of the processing of consumers’ personal data.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "statutory code index", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "choosing", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.content" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_min_duty_of_care", "category": "Safety", "title": "[Unverified - being checked] Vermont: safety.legal", "summary": "[Unverified - being checked] Vermont's Age-Appropriate Design Code Act imposes a minimum duty of care on a covered business that processes a covered minor's data in any capacity, requiring that such processing not result in reasonably foreseeable emotional distress, compulsive use, or discrimination against a covered minor.", "body": "Vermont's Age-Appropriate Design Code Act imposes a minimum duty of care on a covered business that processes a covered minor's data in any capacity, requiring that such processing not result in reasonably foreseeable emotional distress, compulsive use, or discrimination against a covered minor.\n\nWhat Vermont General Assembly actually says:\n\n“(a) A covered business that processes a covered minor’s data in any capacity owes a minimum duty of care to the covered minor. (b) As used in this subchapter, ‘a minimum duty of care’ means the use of the personal data of a covered minor and the design of an online service, product, or feature will not result in: (1) reasonably foreseeable emotional distress as defined in 13 V.S.A. § 1061(2) to a covered minor; (2) reasonably foreseeable compulsive use of the online service, product, or feature by a covered minor; or (3) discrimination against a covered minor based upon race, ethnicity, sex, disability, sexual orientation, gender identity, gender expression, religion, or national origin.”\n\nNote: This duty applies to 'covered business' as defined in § 2449a, not to individual creators.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449c", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "(a) A covered business that processes a covered minor’s data in any capacity owes a minimum duty of care to the covered minor. (b) As used in this subchapter, ‘a minimum duty of care’ means the use of the personal data of a covered minor and the design of an online service, product, or feature will not result in: (1) reasonably foreseeable emotional distress as defined in 13 V.S.A. § 1061(2) to a covered minor; (2) reasonably foreseeable compulsive use of the online service, product, or feature by a covered minor; or (3) discrimination against a covered minor based upon race, ethnicity, sex, disability, sexual orientation, gender identity, gender expression, religion, or national origin.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "safety.legal", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "running", "region": [ "us-vt" ], "platform": "any", "topic": [ "safety.harm", "rules.enforcement" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_enforcement_mechanism", "category": "Safety", "title": "[Unverified - being checked] Vermont: rules.enforcement", "summary": "[Unverified - being checked] Vermont's Age-Appropriate Design Code Act provides that a covered business or processor that violates the subchapter commits an unfair and deceptive act in commerce, and the Attorney General has authority to make rules, conduct civil investigations, bring civil actions, and enter into assurances of discontinuance.", "body": "Vermont's Age-Appropriate Design Code Act provides that a covered business or processor that violates the subchapter commits an unfair and deceptive act in commerce, and the Attorney General has authority to make rules, conduct civil investigations, bring civil actions, and enter into assurances of discontinuance.\n\nWhat Vermont General Assembly actually says:\n\n“(a) A covered business or processor that violates this subchapter or rules adopted pursuant to this subchapter commits an unfair and deceptive act in commerce in violation of section 2453 of this title. (b) The Attorney General shall have the same authority under this subchapter to make rules, conduct civil investigations, bring civil actions, and enter into assurances of discontinuance as provided under chapter 63 of this title.”\n\nNote: Enforcement is exclusively by the Vermont Attorney General. No private right of action is provided for in this section; violation is treated as an unfair and deceptive act under 9 V.S.A. § 2453.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449h", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "(a) A covered business or processor that violates this subchapter or rules adopted pursuant to this subchapter commits an unfair and deceptive act in commerce in violation of section 2453 of this title. (b) The Attorney General shall have the same authority under this subchapter to make rules, conduct civil investigations, bring civil actions, and enter into assurances of discontinuance as provided under chapter 63 of this title.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "rules.enforcement", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "trouble", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.enforcement" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_age_assurance_methods", "category": "Safety", "title": "[Unverified - being checked] Vermont: rules.content", "summary": "[Unverified - being checked] Vermont's law requires the Attorney General to adopt rules identifying 'commercially reasonable and technically feasible methods' for covered businesses and processors to determine if a user is a covered minor, with methods to be adopted by January 1, 2027.", "body": "Vermont's law requires the Attorney General to adopt rules identifying 'commercially reasonable and technically feasible methods' for covered businesses and processors to determine if a user is a covered minor, with methods to be adopted by January 1, 2027.\n\nWhat Vermont General Assembly actually says:\n\n“(b) Rulemaking. (1) Subject to subdivision (2) of this subsection, the Attorney General shall, on or before January 1, 2027, adopt rules identifying commercially reasonable and technically feasible methods for covered businesses and processors to determine if a user is a covered minor, describing appropriate review processes for users appealing their age designations, and providing any additional privacy protections for age assurance data.”\n\nNote: The statute delegates the specific methods to AG rulemaking due by Jan 1, 2027; no specific verification method is in the statute itself.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449g", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "(b) Rulemaking. (1) Subject to subdivision (2) of this subsection, the Attorney General shall, on or before January 1, 2027, adopt rules identifying commercially reasonable and technically feasible methods for covered businesses and processors to determine if a user is a covered minor, describing appropriate review processes for users appealing their age designations, and providing any additional privacy protections for age assurance data.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "rules.content", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.content" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_age_assurance_data_retention", "category": "Safety", "title": "[Unverified - being checked] Vermont: safety.privacy", "summary": "[Unverified - being checked] Vermont's law requires covered businesses and processors to delete any personal data collected for age assurance immediately upon determining whether a user is a covered minor, retaining only the determination of the user's age range.", "body": "Vermont's law requires covered businesses and processors to delete any personal data collected for age assurance immediately upon determining whether a user is a covered minor, retaining only the determination of the user's age range.\n\nWhat Vermont General Assembly actually says:\n\n“(a) Privacy protections for age assurance data. During the process of conducting age assurance, covered businesses and processors shall: (1) only collect personal data of a user that is strictly necessary for age assurance; (2) immediately upon determining whether a user is a covered minor, delete any personal data collected of that user for age assurance, except the determination of the user’s age range; (3) not use any personal data of a user collected for age assurance for any other purpose; (4) not combine personal data of a user collected for age assurance, except the determination of the user’s age range, with any other personal data of the user; (5) not disclose personal data of a user collected for age assurance to a third party that is not a processor; and (6) implement a review process to allow users to appeal their age determination.”\n\nNote: This applies to covered businesses and processors, not to individual creators posting through a platform.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449g", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "(a) Privacy protections for age assurance data. During the process of conducting age assurance, covered businesses and processors shall: (1) only collect personal data of a user that is strictly necessary for age assurance; (2) immediately upon determining whether a user is a covered minor, delete any personal data collected of that user for age assurance, except the determination of the user’s age range; (3) not use any personal data of a user collected for age assurance for any other purpose; (4) not combine personal data of a user collected for age assurance, except the determination of the user’s age range, with any other personal data of the user; (5) not disclose personal data of a user collected for age assurance to a third party that is not a processor; and (6) implement a review process to allow users to appeal their age determination.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "safety.privacy", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "running", "region": [ "us-vt" ], "platform": "any", "topic": [ "safety.privacy" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_transparency_requirements", "category": "Safety", "title": "[Unverified - being checked] Vermont: safety.privacy", "summary": "[Unverified - being checked] Vermont's law requires a covered business to prominently and clearly provide on their website or mobile application their privacy information, terms of service, policies, community standards, the purpose of each algorithmic recommendation system, inputs used by those systems, and descriptions for every feature using personal data of covered minors including how long the data is retained.", "body": "Vermont's law requires a covered business to prominently and clearly provide on their website or mobile application their privacy information, terms of service, policies, community standards, the purpose of each algorithmic recommendation system, inputs used by those systems, and descriptions for every feature using personal data of covered minors including how long the data is retained.\n\nWhat Vermont General Assembly actually says:\n\n“A covered business shall prominently and clearly provide on their website or mobile application: (1) the covered business's privacy information, terms of service, policies, and community standards; (2) the purpose of each algorithmic recommendation system in use by the covered business; (3) inputs used by the algorithmic recommendation system and how each input: (A) is measured or determined; (B) uses the personal data of covered minors; (C) influences the recommendation issued by the system; and (D) is weighed relative to the other inputs reported in this subdivision (3); and (4) descriptions, for every feature of the service that uses the personal data of covered minors, of: (A) the purpose of the service feature; (B) the personal data collected by the service feature; (C) the personal data used by the service feature; (D) how the personal data is used by the service feature; (E) any personal data transferred to or shared with a processor or third party by the service feature, the identity of the processor or third party, and the purpose of the transfer or sharing; and (F) how long the personal data is retained.”\n\nNote: Applies to 'covered business' per definition in § 2449a; not an individual creator posting through a platform.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449e", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "A covered business shall prominently and clearly provide on their website or mobile application: (1) the covered business's privacy information, terms of service, policies, and community standards; (2) the purpose of each algorithmic recommendation system in use by the covered business; (3) inputs used by the algorithmic recommendation system and how each input: (A) is measured or determined; (B) uses the personal data of covered minors; (C) influences the recommendation issued by the system; and (D) is weighed relative to the other inputs reported in this subdivision (3); and (4) descriptions, for every feature of the service that uses the personal data of covered minors, of: (A) the purpose of the service feature; (B) the personal data collected by the service feature; (C) the personal data used by the service feature; (D) how the personal data is used by the service feature; (E) any personal data transferred to or shared with a processor or third party by the service feature, the identity of the processor or third party, and the purpose of the transfer or sharing; and (F) how long the personal data is retained.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "safety.privacy", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "running", "region": [ "us-vt" ], "platform": "any", "topic": [ "safety.privacy", "rules.content" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_exclusions", "category": "Safety", "title": "[Unverified - being checked] Vermont: rules.enforcement", "summary": "[Unverified - being checked] Vermont's law excludes federal, state, tribal, or local government entities, protected health information under HIPAA, public health activities, research subjects, journalism entities, and financial institutions subject to the Gramm-Leach-Bliley Act from the subchapter's requirements.", "body": "Vermont's law excludes federal, state, tribal, or local government entities, protected health information under HIPAA, public health activities, research subjects, journalism entities, and financial institutions subject to the Gramm-Leach-Bliley Act from the subchapter's requirements.\n\nWhat Vermont General Assembly actually says:\n\n“This subchapter does not apply to: (1) a federal, state, tribal, or local government entity in the ordinary course of its operation; (2) protected health information that a covered entity or business associate processes in accordance with, or documents that a covered entity or business associate creates for the purpose of complying with, HIPAA; (3) information used only for public health activities and purposes described in 45 C.F.R. § 164.512; (4) information that identifies a consumer in connection with: (A) activities that are subject to the Federal Policy for the Protection of Human Subjects as set forth in 45 C.F.R. Part 46; (B) research on human subjects undertaken in accordance with good clinical practice guidelines issued by the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use; (C) activities that are subject to the protections provided in 21 C.F.R. Part 50 and 21 C.F.R. Part 56; or (D) research conducted in accordance with the requirements set forth in subdivisions (A)-(C) of this subdivision (4) or otherwise in accordance with State or federal law; (5) an entity whose primary purpose is journalism as defined in 12 V.S.A. § 1615(a)(2) and that has a majority of its workforce consisting of individuals engaging in journalism; and (6) a financial institution subject to Title V of the Gramm-Leach-Bliley Act, Pub. L. No. 106-102, and regulations adopted to implement that Act.”\n\nNote: The exclusions apply to covered businesses that fall within specific categories; they do not create an exemption for individual creators.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/section/09/062/02449b", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "This subchapter does not apply to: (1) a federal, state, tribal, or local government entity in the ordinary course of its operation; (2) protected health information that a covered entity or business associate processes in accordance with, or documents that a covered entity or business associate creates for the purpose of complying with, HIPAA; (3) information used only for public health activities and purposes described in 45 C.F.R. § 164.512; (4) information that identifies a consumer in connection with: (A) activities that are subject to the Federal Policy for the Protection of Human Subjects as set forth in 45 C.F.R. Part 46; (B) research on human subjects undertaken in accordance with good clinical practice guidelines issued by the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use; (C) activities that are subject to the protections provided in 21 C.F.R. Part 50 and 21 C.F.R. Part 56; or (D) research conducted in accordance with the requirements set forth in subdivisions (A)-(C) of this subdivision (4) or otherwise in accordance with State or federal law; (5) an entity whose primary purpose is journalism as defined in 12 V.S.A. § 1615(a)(2) and that has a majority of its workforce consisting of individuals engaging in journalism; and (6) a financial institution subject to Title V of the Gramm-Leach-Bliley Act, Pub. L. No. 106-102, and regulations adopted to implement that Act.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "rules.enforcement", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "choosing", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.enforcement", "rules.content" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_effective_date_and_status", "category": "Safety", "title": "[Unverified - being checked] Vermont: rules.enforcement", "summary": "[Unverified - being checked] Vermont's Age-Appropriate Design Code Act was enacted on June 12, 2025 and takes effect January 1, 2027; NetChoice has filed a pending pre-enforcement First Amendment challenge and no preliminary injunction has been entered as of the rulemaking page date.", "body": "Vermont's Age-Appropriate Design Code Act was enacted on June 12, 2025 and takes effect January 1, 2027; NetChoice has filed a pending pre-enforcement First Amendment challenge and no preliminary injunction has been entered as of the rulemaking page date.\n\nWhat Office of the Vermont Attorney General actually says:\n\n“Pursuant to Act 63, An Act Relating to an Age-Appropriate Design Code, passed in May 2025, the Vermont Attorney General's Office (AGO) is soliciting comments, data, and other information to assist the office in crafting rules to protect minors from certain harms through the processing of their data pursuant to 9 V.S.A. § 2449a et seq. The law and any adopted rules take effect on January 1, 2027.”\n\nNote: Enacted June 12, 2025; takes effect January 1, 2027. NetChoice challenge is pending with no injunction entered (per AGO website). The AGO page also states rulemaking is underway for sections 2449f and 2449g with draft rules published July 8, 2026 and comments due October 2, 2026.", "source_type": "official", "source_link": "https://ago.vermont.gov/vermont-age-appropriate-design-code-rulemaking", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Office of the Vermont Attorney General", "evidence_quote": "Pursuant to Act 63, An Act Relating to an Age-Appropriate Design Code, passed in May 2025, the Vermont Attorney General's Office (AGO) is soliciting comments, data, and other information to assist the office in crafting rules to protect minors from certain harms through the processing of their data pursuant to 9 V.S.A. § 2449a et seq. The law and any adopted rules take effect on January 1, 2027.", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "rules.enforcement", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "trouble", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.enforcement" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } }, { "id": "learn_r448_vermont_age_verification_as_it_lands_on_a_creator_vt_individual_creator_binding", "category": "Safety", "title": "[Unverified - being checked] Vermont: rules.enforcement", "summary": "[Unverified - being checked] Vermont's statute does NOT explicitly bind an individual creator who sells their own content through another platform's service; the duties fall on the 'covered business' that 'conducts business in this State,' generates a majority of annual revenue from online services, and collects personal data, and there is no provision imposing a direct duty or verification obligation on an individual creator selling through a platform.", "body": "Vermont's statute does NOT explicitly bind an individual creator who sells their own content through another platform's service; the duties fall on the 'covered business' that 'conducts business in this State,' generates a majority of annual revenue from online services, and collects personal data, and there is no provision imposing a direct duty or verification obligation on an individual creator selling through a platform.\n\nWhat Vermont General Assembly actually says:\n\n“Subchapter 006 : Vermont Age-Appropriate Design Code Act (a) A covered business that processes a covered minor's data in any capacity owes a minimum duty of care ... (a) A covered business shall prominently and clearly provide on their website or mobile application ... (a) A covered business or processor that violates this subchapter ...”\n\nNote: Inference is based on the absence of any provision naming 'individual creator' or 'individual' as a regulated party alongside the repeated use of 'covered business' throughout the subchapter. The definition of covered business requires substantial business characteristics, not merely posting content through a platform account. This conclusion rests on what the statute omits as much as on what it says.", "source_type": "official", "source_link": "https://legislature.vermont.gov/statutes/chapter/09/062", "last_verified": "2026-10-21", "reliability": "STRONG PRACTICE", "source_tier": "A", "source_publisher": "Vermont General Assembly", "evidence_quote": "Subchapter 006 : Vermont Age-Appropriate Design Code Act (a) A covered business that processes a covered minor's data in any capacity owes a minimum duty of care ... (a) A covered business shall prominently and clearly provide on their website or mobile application ... (a) A covered business or processor that violates this subchapter ...", "volatility": "", "from_batch": "448-vermont-age-verification-as-it-lands-on-a-creator", "subject": "Vermont", "topic": "rules.enforcement", "applies_to_country": "us-vt", "applies_to_scope": "State of Vermont", "tags": { "lane": "any", "stage": "setting_up", "region": [ "us-vt" ], "platform": "any", "topic": [ "rules.enforcement", "access.signup" ], "explicitness": "any" }, "verification": { "status": "unverified", "label": "Unverified - being checked", "reasons": [ "legal_fetch_over_cap" ], "checked_utc": "20261021-123916Z" } } ] }