Key developments
Vermont enacts comprehensive privacy and genetic-data laws
IAPP's Alex LaCasse reports Vermont became the 23rd U.S. state to enact a comprehensive consumer privacy law after Gov. Phil Scott signed S.71, the Vermont Data Privacy and Online Surveillance Act, on June 16. The law takes effect Jan. 1, 2028, applies at thresholds including 35,000 residents, sensitive-data processing for 3,000 residents, or sale of data for 3,000 residents, and requires opt-out preference signal handling plus privacy notice disclosures for personal data used to train large language models. Scott also signed HB211 creating data broker and edtech registration requirements, and HB639 restricting sale of genetic data without express consent and requiring DNA sample destruction and associated data deletion on request.
Why it matters
Vermont adds another state regime to the U.S. privacy patchwork while pushing into AI training disclosures, broker registration, and genetic-data deletion rights.
Sources & driving stories
IAPP · Alex LaCasse
IAPP coverageFPF
FPF coverageEDPB proposes common GDPR breach notification template
Pinsent Masons reports the European Data Protection Board announced a common template for GDPR personal data breach notifications, with public consultation running until Aug. 5, 2026. The proposed template contains 125 questions covering breach nature, affected data subjects and records, DPO contact details, likely consequences, and remedial measures, and asks for more explanation than many current national forms. Pinsent Masons experts Stuart Davey, Daniel Widmann and Gemma Erskine said standardization could help, especially in Germany, but warned companies may lack much of the requested information within GDPR’s 72-hour notification window.
Why it matters
A standardized EU breach form could simplify multi-authority reporting but materially raise early-stage disclosure burdens during cyber incidents.
Sources & driving stories
PINSENT MASONS
Pinsent Masons coverageFISA Section 702 surveillance authority lapses
Techdirt reported that Section 702 authority under the Foreign Intelligence Surveillance Act lapsed, stopping continued collections under a program used by the NSA to collect communications to and from foreign targets, including communications involving Americans. The Intercept reported the lapse is unfolding alongside Senate Intelligence Committee attention to Jay Clayton’s potential confirmation as director of national intelligence and renewed debate over whether any reauthorization should include reforms such as a warrant requirement. Privacy advocates and lawmakers including Sen. Ron Wyden are pressing for stronger limits on FBI “backdoor” searches of Americans’ communications.
Why it matters
Section 702 is one of the central U.S. warrantless surveillance authorities, and its lapse shifts leverage toward reform demands in any renewal fight.
Sources & driving stories
TECHDIRT
Techdirt coverageTHE INTERCEPT
The Intercept coverageWorth noting
WORTH NOTING
ICE reportedly buys ITIN-linked data
Gadgetreview's Nikshep Myle reports a $9.97 million June 5 contract with Thundercat Technology for ITIN data subscription and analytics, raising claims that ICE is routing around IRS tax-data limits and a court order blocking additional sharing.
WORTH NOTING
FCC burner-phone proposal nears deadline
CNET's Joe Supan reports FCC Know-Your-Customer rules would require telecoms to collect names, addresses and government ID numbers for every cellphone line, with public comment open until June 25.
WORTH NOTING
ICO cautions clinic records misuse
Mandatory reports the U.K. ICO issued a formal caution to a former London Clinic employee accused of attempting to access and sell Princess Kate Middleton’s private health files for profit.
Still unclear
OPEN QUESTION
Can breach teams satisfy a 125-question EU form in 72 hours?
The EDPB template may standardize reporting, but early incident facts are often incomplete and may overlap with NIS2 and other notification regimes.
OPEN QUESTION
Will surveillance renewal include real warrant reforms?
The reported Section 702 lapse gives reform advocates leverage, but renewal politics may still favor minimal changes.
