An act relating to enhancing consumer privacy and the age-appropriate design code

This bill establishes Vermont's Data Privacy Act to protect consumer personal data by requiring businesses to obtain clear, affirmative consent before collecting and using information. It directly affects adult residents of Vermont who use services from companies that process their personal data, while excluding individuals acting in commercial or employment contexts. Key provisions define sensitive data types like biometric, genetic, and health information, prohibit manipulative design patterns, and grant consumers rights to access, correct, and delete their data. The legislation also creates specific protections for children's online experiences and requires businesses to implement security measures and provide privacy notices.