VDPOSA

Confirm whether a controller is processing your personal data and access it, including inferences derived from it and whether it is used for profiling to make decisions with legal or similarly significant effects.

Correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of the processing.

Delete personal data you provided to a controller or that it obtained about you.

Obtain a copy of your personal data in a portable and, where technically feasible, readily usable format you can transmit to another controller without hindrance, where the processing is automated.

Opt out of the processing of your personal data for targeted advertising, including through an opt-out preference signal such as a browser setting that the controller must honor.

Opt out of the sale of your personal data, including through an opt-out preference signal such as a browser setting that the controller must honor; a controller may not sell your sensitive data without your consent.

Opt out of profiling in furtherance of any automated decision with legal or similarly significant effects, meaning decisions about financial or lending services, housing, insurance, education, criminal justice, employment or health care.

If profiling led to an automated decision with legal or similarly significant effects about you, then where feasible question the result, learn the reason for it and review the data used; for housing decisions, also correct inaccurate data and have the decision reevaluated.

Obtain a list of the third parties a controller sold your personal data to or, if it keeps no consumer-specific list, a list of all third parties it has sold personal data to.

Designate another person, including through a technology such as an internet link, browser setting, browser extension or global device setting, to opt out on your behalf; this agent right covers opt-outs only.

Appeal a controller's refusal to act on your request through an appeal process that must be conspicuously available and similar to the request process, and receive a written decision with reasons.

If your appeal is denied, the controller must give you an online mechanism, if available, or another method to contact the Vermont Attorney General and submit a complaint.

Revoke consent you gave a controller, such as consent to process your sensitive data, through a mechanism at least as easy as the one you used to give it, after which the controller must stop processing that data.