Last Update: 08/01/2026 at 1:34 PM EST

Mid-day Briefing: Privacy

Wednesday, June 17, 2026 · 6:50 PM EDT

Key developments

IAPP

Vermont enacts comprehensive privacy and genetic-data laws

IAPP's Alex LaCasse reports Vermont became the 23rd U.S. state to enact a comprehensive consumer privacy law after Gov. Phil Scott signed S.71, the Vermont Data Privacy and Online Surveillance Act, on June 16. The law takes effect Jan. 1, 2028, applies at thresholds including 35,000 residents, sensitive-data processing for 3,000 residents, or sale of data for 3,000 residents, and requires opt-out preference signal handling plus privacy notice disclosures for personal data used to train large language models. Scott also signed HB211 creating data broker and edtech registration requirements, and HB639 restricting sale of genetic data without express consent and requiring DNA sample destruction and associated data deletion on request.

Why it matters

Vermont adds another state regime to the U.S. privacy patchwork while pushing into AI training disclosures, broker registration, and genetic-data deletion rights.

Sources & driving stories

IAPP · Alex LaCasse

IAPP coverage
PINSENT MASONS

EDPB proposes common GDPR breach notification template

Pinsent Masons reports the European Data Protection Board announced a common template for GDPR personal data breach notifications, with public consultation running until Aug. 5, 2026. The proposed template contains 125 questions covering breach nature, affected data subjects and records, DPO contact details, likely consequences, and remedial measures, and asks for more explanation than many current national forms. Pinsent Masons experts Stuart Davey, Daniel Widmann and Gemma Erskine said standardization could help, especially in Germany, but warned companies may lack much of the requested information within GDPR’s 72-hour notification window.

Why it matters

A standardized EU breach form could simplify multi-authority reporting but materially raise early-stage disclosure burdens during cyber incidents.

Sources & driving stories

TECHDIRT

FISA Section 702 surveillance authority lapses

Techdirt reported that Section 702 authority under the Foreign Intelligence Surveillance Act lapsed, stopping continued collections under a program used by the NSA to collect communications to and from foreign targets, including communications involving Americans. The Intercept reported the lapse is unfolding alongside Senate Intelligence Committee attention to Jay Clayton’s potential confirmation as director of national intelligence and renewed debate over whether any reauthorization should include reforms such as a warrant requirement. Privacy advocates and lawmakers including Sen. Ron Wyden are pressing for stronger limits on FBI “backdoor” searches of Americans’ communications.

Why it matters

Section 702 is one of the central U.S. warrantless surveillance authorities, and its lapse shifts leverage toward reform demands in any renewal fight.

Sources & driving stories

Worth noting

WORTH NOTING

ICE reportedly buys ITIN-linked data

Gadgetreview's Nikshep Myle reports a $9.97 million June 5 contract with Thundercat Technology for ITIN data subscription and analytics, raising claims that ICE is routing around IRS tax-data limits and a court order blocking additional sharing.

WORTH NOTING

FCC burner-phone proposal nears deadline

CNET's Joe Supan reports FCC Know-Your-Customer rules would require telecoms to collect names, addresses and government ID numbers for every cellphone line, with public comment open until June 25.

WORTH NOTING

ICO cautions clinic records misuse

Mandatory reports the U.K. ICO issued a formal caution to a former London Clinic employee accused of attempting to access and sell Princess Kate Middleton’s private health files for profit.

Still unclear

OPEN QUESTION

Can breach teams satisfy a 125-question EU form in 72 hours?

The EDPB template may standardize reporting, but early incident facts are often incomplete and may overlap with NIS2 and other notification regimes.

OPEN QUESTION

Will surveillance renewal include real warrant reforms?

The reported Section 702 lapse gives reform advocates leverage, but renewal politics may still favor minimal changes.