vermont cannabis privacy law