Vermont passes a 2028 data privacy law letting residents see, correct, and delete what companies hold on them, and banning health-data geofencing near clinics.