Vermont businesses have 18 months to prepare for more demanding compliance obligations for AI, profiling and consumer health data.