8 V.S.A. § 2452
A personal information protection company that accepts personal information pursuant to a written agreement to provide personal information protection services has a fiduciary responsibility to the consumer when providing personal protection services.
(Added 2017, No. 205 (Adj. Sess.), § 2.)