Vermont Governor Vetoes Proposed Comprehensive Privacy Bill

In what may be a first, a state governor has vetoed a comprehensive state privacy bill that had passed both houses of the state legislature.  In mid-June, the governor of Vermont refused to sign the bill, saying that the private right of action it included represented a threat to small/medium businesses.  The governor also questioned its provisions aimed at children's privacy.  The legislature failed to override the veto during a later special session.  

WHY IT MATTERS

Although a quarter of states currently have a privacy law in effect or pending, with more to come, most of those laws do not allow citizens to bring direct suit against companies who fail to comply.  They depend, instead, on the state attorney general to enforce the law against violators.  Where consumers have a direct right of action, the compliance headaches can add up quickly – and so can the damages assessed against companies who lose their cases in court.  The stance of the Vermont governor represents rare pushback against a privacy bill during privacy's arguable heyday, but it also represents taking a stand on how these issues should be investigated and punished.