Vermont's governor has vetoed a broad data privacy bill that would have been one of the strongest in the country to crack down on companies' use of online personal data by letting consumers file civil lawsuits against companies that break certain privacy rules.