Vermont Artificial Intelligence and Consumer Data Act (AICDA): every control, and what you already have

26 controls 179 frameworks share controls with it United States — Vermont verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)	3	measure it →
Family Educational Rights and Privacy Act (FERPA)	3	measure it →
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)	3	measure it →
India DPDP Act	3	measure it →
Indiana Consumer Data Protection Act	3	measure it →
Indonesia PDP Law	3	measure it →
Iowa Consumer Data Protection Act	3	measure it →
Jamaica Data Protection Act 2020	3	measure it →
Kentucky Consumer Data Protection Act	3	measure it →
Law No. 172-13 on the Protection of Personal Data	3	measure it →
Ley Orgánica de Protección de Datos Personales (LOPDP)	3	measure it →
LGPD	3	measure it →

Every control

Code	Control	Also in
`VERMONTAICDA-1`	AI System Inventory and Risk Assessment	48
`VERMONTAICDA-2`	Consumer Rights (Access, Correction, Deletion, Opt-Out, Portability)	0
`VERMONTAICDA-3`	Bias Testing, Discrimination Prevention, Transparency	134
`VERMONTAICDA-4`	Vermont AG Enforcement and Cure	135
`VT-AICDA-1`	Scope and Applicability Determination	0
`VT-AICDA-10`	Consumer Personal Data Inventory	0
`VT-AICDA-11`	Sensitive Data Consent and Handling	0
`VT-AICDA-12`	Children and Minors Protection	0
`VT-AICDA-13`	Consumer Access, Correction, Deletion Requests	0
`VT-AICDA-14`	Universal Opt-Out Signal Recognition	0
`VT-AICDA-15`	Data Protection Assessment for High-Risk Processing	0
`VT-AICDA-16`	AI System Inventory and Classification	0
`VT-AICDA-17`	Algorithmic Decision Logging	0
`VT-AICDA-18`	Training Data Documentation and Provenance	0
`VT-AICDA-19`	Vendor and Processor Contractual Safeguards	0
`VT-AICDA-2`	Algorithmic Discrimination Risk Assessment	0
`VT-AICDA-20`	Incident and Discrimination Complaint Handling	0
`VT-AICDA-21`	Public Transparency Reporting	0
`VT-AICDA-22`	Recordkeeping for Regulator Inspection	0
`VT-AICDA-3`	Consequential Decision Notice to Consumers	0
`VT-AICDA-4`	Right to Explanation of Automated Decisions	0
`VT-AICDA-5`	Right to Human Review and Appeal	0
`VT-AICDA-6`	Right to Opt Out of Automated Decision-Making	0
`VT-AICDA-7`	Pre-Deployment Impact Assessment Documentation	0
`VT-AICDA-8`	Annual Algorithmic Discrimination Audit	0
`VT-AICDA-9`	Developer-Deployer Information Sharing	0

Tell me when Vermont Artificial Intelligence and Consumer Data Act (AICDA) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Anti-bribery contract clauses
Subsidiary attestations
Compliance certification template
Audit rights documentation
Approved FCPA contract clauses library
Contract management system reports showing clause coverage
complaint handling procedure
complaint register
PDPC complaint responses
30-day SLA tracking

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

Audit rights never exercised named by 5 frameworks
no root cause analysis named by 3 frameworks

What this page is

A control-level reference for Vermont Artificial Intelligence and Consumer Data Act (AICDA), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition