Tag Archives: Vermont

State Data Breach Notification Requirements Specifically Applicable to Insurers

Almost all U.S. states and territories have enacted breach notification laws requiring private and/or government entities to notify individuals when their personal information is compromised. These laws vary, and much has been written about the challenges caused by the differences, including who must comply with the law (e.g., persons, businesses, information brokers, government entities, covered … Continue Reading

Vermont Grocery Store Agrees to Settlement with Attorney General for Alleged Violation of State Data Breach Response Laws

By Theodore J. Kobus III on October 2, 2013 Posted in Data Breach Notification Laws, Data Breaches

Co-authored by: Charles K. Shih Natural Provisions, Inc., a Vermont health foods grocery chain, agreed to pay $30,000 to settle claims brought by the Vermont attorney general that it failed to notify consumers and the attorney general within the statutory period required by Vermont’s Security Breach Notice Act and Consumer Protection Act. Natural Provisions, Inc. … Continue Reading

Guest Blog: Vermont Privacy Breach Regulations

By BakerHostetler on April 16, 2013 Posted in Data Breaches

Editor’s Notes:Guest blog Interview by Mark Greisiger, President NetDiligence®This blog post has been republished with permission from Junto – NetDiligence Blog A Q&A with Ryan KrigerAmong state Attorneys General, Vermont has gained a reputation for being particularly aggressive about data breach and privacy regulation. To better understand the state’s Consumer Protection Act requirements and processes … Continue Reading

Restrictions on Commercial Advertising Speech in Vermont Data Mining Law Violate First Amendment

By Craig A. Hoffman on July 6, 2011 Posted in Behavioral Advertising

As we briefly discussed here, on June 23, 2011, the U.S. Supreme Court in Sorrell v. IMS held that a Vermont statute restricting the sale, disclosure and use of pharmacy records containing the prescribing practices of doctors for marketing purposes by pharmaceutical companies violated the First Amendment’s protection of commercial advertising speech. From a commercial advertising … Continue Reading

Supreme Court Finds Vermont Data Mining Law Unconstitutional

By Craig A. Hoffman on June 23, 2011 Posted in HIPAA/HITECH, Medical Privacy

The U.S. Supreme Court released its decision today in Sorrell v. IMS Health Care, Inc., a case concerning the constitutionality of a Vermont statute that prohibited pharmacies from selling or disclosing prescriber-identifying information taken from prescriptions for marketing purposes. The challenge to the statute was made by data mining companies. The Supreme Court stated that … Continue Reading