An act relating to genetic data privacy

This bill, S.248 (Genetic Information Privacy Act), requires direct-to-consumer genetic testing companies operating in Vermont to protect the genetic data of Vermont residents. Companies must obtain explicit consumer consent before sharing data (prohibiting "dark patterns" like deceptive interfaces), allow consumers to access their own genetic data, and limit data sharing without permission. The law defines "genetic data" broadly to include DNA, RNA, SNPs, and derived information, but excludes de-identified data and data used in federally compliant research. It directly affects Vermont residents using genetic testing services and the companies providing those services within the state.