Data Brokers Face Complex Compliance Patchwork as Connecticut and Vermont Enact New Requirements

At the state and federal levels, legislative and enforcement bodies are expanding efforts to regulate data brokers. On May 27, 2026, Connecticut became the latest state to enact data broker requirements, and on June 16, 2026, Vermont amended and expanded the scope of its existing data broker law. At the federal level, the Protecting Americans’ Data from Foreign Adversaries Act (PADFAA) has brought renewed attention to the industry, with the Federal Trade Commission issuing warning letters to data brokers and signaling that PADFAA enforcement is a priority. These developments underscore the growing scrutiny data brokers face from federal and state regulators.

Read the full blog post.