§ 2451. Definitions As used in this section: (1) “Personal information” means data capable of being associated with a particular natural person, including gender identification, birth information, marital status, citizenship and nationality, biometric records, government identification designations, and personal, educational, and financial histories. (2) “Personal information protection company” means a business that is organized for […]
§ 2452. Personal information as the subject of a fiduciary relationship A personal information protection company that accepts personal information pursuant to a written agreement to provide personal information protection services has a fiduciary responsibility to the consumer when providing personal protection services. (Added 2017, No. 205 (Adj. Sess.), § 2.)
§ 2453. Qualified personal information protection company (a) A personal information protection company shall qualify to conduct its business under the terms of this chapter, chapter 72 of this title, and applicable rules adopted by the Department of Financial Regulation. (b) A person shall not engage in business as a personal information protection company in […]
§ 2454. Name; office A personal information protection company shall file with the Department of Financial Regulation the name it proposes to use in connection with its business, which the Department shall not approve if it determines that the name may be misleading, likely to confuse the public, or deceptively similar to any other business […]
§ 2455. Conduct of business (a) A personal information protection company may: (1) operate through remote interaction with the individuals entrusting personal information to the company, and there shall be no requirement of Vermont residency or other contact for any such individual to establish such a relationship with the company; and (2) subject to applicable […]
§ 2457. Reports; rules (a) The Department of Financial Regulation may prescribe by rule the timing and manner of reports by a personal information protection company to the Department. (b) The Department may adopt rules to govern other aspects of the business of a personal information protection company, including its protection and safeguarding of personal […]