Vermont implemented privacy-related legislation that applies to residents or activities that occur within the state, including breach notification or other data security laws. Companies in Vermont must comply not only with applicable federal law, but also with relevant state privacy and security laws and regulations.