Privacy Law Library

Social Security Number Protection Act

VT SSN Act

Data security · Government records

Limits how businesses and government bodies display, transmit and disclose Social Security numbers. Businesses may not publicly post SSNs, print them on access cards or mailings, or sell them to third parties without a legitimate purpose, subject to listed exceptions. Individuals may ask town clerks and courts to redact SSNs and other identifiers from records posted online.

Where
Vermont
Citation
9 V.S.A. § 2440
Status
In force
In force since
2007-07-01
Enforced by
Vermont Attorney General and State's Attorneys; Department of Financial Regulation for its licensees
People can sue
No
Penalties
Enforced with Consumer Protection Act remedies (civil penalties up to $10,000 per violation under 9 V.S.A. § 2458); a person who requests a public-record redaction without authority commits an infraction with a fine up to $500.
Applies to
  • Businesses that handle individuals' Social Security numbers
  • The State, State agencies, political subdivisions and their agents (separate duties under subsection (d))

Rights it gives people

  • Individuals may submit written requests to have SSNs and financial identifiers redacted from records that town clerks or courts post online.9 V.S.A. § 2440(f)

Practices it requires

  • Do not intentionally make an individual's SSN available to the general public or print it on cards needed to access products or services.9 V.S.A. § 2440(b)(1)-(2)
  • Do not print SSNs on mailed materials unless required by law; permitted mailings may not show the SSN on a postcard or through the envelope.9 V.S.A. § 2440(b)(5), (c)(1)
  • Do not sell, lease or otherwise disclose an SSN to a third party without written consent when the discloser has reason to believe the recipient lacks a legitimate purpose.9 V.S.A. § 2440(b)(6)

Security duties

  • Do not require SSNs to be sent over the internet unless the connection is secure or the number is encrypted, or used alone as a website login.9 V.S.A. § 2440(b)(3)-(4)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Research reference, not legal advice.