Technology (Data Privacy)

signed · Vermont · House May 29, 2026

H 639: An act relating to genetic data privacy

This bill, H.639 (Genetic Information Privacy Act), requires direct-to-consumer genetic testing companies to protect the genetic data of Vermont residents. It mandates that companies obtain clear "express consent" from consumers before collecting or sharing their genetic data (defined as information from DNA analysis, including SNPs and inferred data), prohibits using "dark patterns" to manipulate consent, and limits data sharing without permission. Consumers gain the right to access their own genetic data and must actively authorize its use. The law applies specifically to companies offering genetic testing directly to Vermont residents, excluding deidentified data and research conducted under federal human subjects protections.

Topics ✓ TechnologySupports TechnologyMandates express consent for genetic data collection and limits sharing without permission, directly protecting consumer data privacy in technology sector.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

introduced · Vermont · Senate Jan 23, 2026

S 302: An act relating to limiting the collection of personally identifying information

S.302 prohibits Vermont public agencies from collecting or disclosing certain personally identifying information, including immigration status and religious affiliation, unless required by federal law. It specifically bans using state resources to assist federal registration programs based on such data and requires agencies continuing to collect immigration information to explain why by December 2026. The bill affects all state and local government entities, including police, schools, and social services, by restricting how they handle sensitive personal data. It includes exceptions for compliance with federal laws like 8 U.S.C. §§ 1373 and 1644, and permits sharing aggregated, non-identifiable data. The law takes effect upon passage.

Topics ✓ Criminal JusticeSupports Criminal JusticeProhibits police from collecting immigration status, protecting civil rights and enhancing law enforcement accountability - key criminal justice reform indicators.85% confidence ✓ ImmigrationSupports ImmigrationProhibits state agencies from collecting/disclosing immigration status, bans state resources for federal registration programs, and limits state-federal cooperation on immigration enforcement.95% confidence ✓ TechnologySupports TechnologyProhibits collection of PII (immigration status, religious affiliation), directly enhancing data privacy protections under technology policies.95% confidence

Sub-Topics Policing Data Privacy

Track

introduced · Vermont · House Jan 16, 2026

H 706: An act relating to internet browsers and data selling

H 706 requires internet browser developers (like companies that make Chrome or Firefox) to include a simple, easily accessible setting in their browsers. This setting lets users send a clear signal to websites that they do not want their personal data sold. The bill directly affects browser companies and aims to give consumers control over how their data is used by requiring browsers to support this opt-out functionality. It defines "personal data" broadly to include information linked to individuals or devices, and includes enforcement through the Attorney General. The law takes effect January 1, 2027.

Topics ✓ TechnologySupports TechnologyRequires browsers to enable user opt-out of data selling, directly protecting consumer privacy rights through mandatory browser functionality.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Jan 28, 2026

H 791: An act relating to State government and information privacy

H.791 establishes the "Vermont Government Data Practices Act," setting privacy standards for how state agencies handle personal information. It requires all Vermont state agencies (including departments, boards, and commissions) to only collect and store necessary personal data - such as health records, biometrics, location data, or financial details - directly from individuals when possible, and to maintain accuracy and relevance. The bill prohibits agencies from disclosing personal information without justification and mandates that contractors handling state data follow the same rules. This directly affects how Vermont's government manages citizen data across all executive branch operations.

Topics ✓ TechnologySupports TechnologyBill establishes strict data privacy standards for state agencies, requiring minimal data collection and prohibiting unauthorized disclosure - directly protects personal information under data privacy framework.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · Senate Jan 14, 2026

S 248: An act relating to genetic data privacy

This bill, S.248 (Genetic Information Privacy Act), requires direct-to-consumer genetic testing companies operating in Vermont to protect the genetic data of Vermont residents. Companies must obtain explicit consumer consent before sharing data (prohibiting "dark patterns" like deceptive interfaces), allow consumers to access their own genetic data, and limit data sharing without permission. The law defines "genetic data" broadly to include DNA, RNA, SNPs, and derived information, but excludes de-identified data and data used in federally compliant research. It directly affects Vermont residents using genetic testing services and the companies providing those services within the state.

Topics ✓ TechnologySupports TechnologyBill mandates explicit consent and data protection for genetic testing companies, strengthening consumer data privacy in technology sector per topic description.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Jan 29, 2026

H 812: An act relating to data loyalty

Vermont's H.812, the "Vermont Duty of Data Loyalty Act," requires businesses (called "covered entities") to handle consumer personal data responsibly by limiting how they store, share, or sell it. It directly affects Vermont consumers and businesses that collect personal data, excluding small businesses, government agencies, and employee data from its scope. Key provisions define "covered data" (information identifying individuals), prohibit selling data for cross-context behavioral advertising without consent, and create a "duty of data loyalty" for covered entities. The law aims to strengthen privacy protections by regulating data practices while specifying what data types and business types are excluded from coverage.

Topics ✓ TechnologySupports TechnologyProhibits selling consumer data for behavioral advertising and mandates responsible data handling, directly strengthening consumer data privacy protections.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Jan 14, 2026

H 668: An act relating to automatic renewal contracts

This bill requires sellers and lessors to make it significantly easier for consumers to cancel automatic renewal contracts, particularly those sold online. It mandates clear "opt-in" consent (not automatic opt-out), 30-60 day advance notices before renewal, and simple cancellation methods (like online tools matching how the contract was signed). It applies to contracts with an initial term of one month or longer, directly affecting consumers who use subscription services and the businesses offering them. The law aims to prevent surprise renewals by ensuring cancellation is as straightforward as signing up.

Topics ✓ TechnologySupports TechnologyMandates clear opt-in, advance notices, and easy cancellation for online subscriptions, enhancing consumer control in digital services per tech-related consumer protection indicators.85% confidence

Sub-Topics Data Privacy

Track

introduced · Vermont · Senate Jan 6, 2026

S 207: An act relating to prohibiting surveillance pricing

This Vermont bill (S.207) prohibits businesses from using "surveillance pricing" to set different prices for consumer products based on data collected through electronic surveillance technology (like AI or tracking tools). It directly affects retailers, online sellers, and service providers in Vermont that sell consumer products (e.g., groceries, electronics, subscriptions). The law bans price discrimination using personally identifiable or aggregated consumer data, except for price differences based solely on actual costs, equal discounts for all customers (with clear notice and consent if personal data is used), or licensed insurance companies following existing rate rules. The bill takes effect July 1, 2026.

Topics ✓ TechnologySupports TechnologyProhibits surveillance pricing using consumer data from tracking/AI, directly strengthening data privacy protections against exploitative tech practices.95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Jan 27, 2026

H 784: An act relating to the regulation of chatbots

This bill requires chatbot providers operating in Vermont to protect users' data privacy and security, clearly disclose when users are interacting with an AI (not a human), and allow users to access their own chat logs. It defines key terms like "chatbot" (AI systems simulating conversation) and "affirmative consent" (clear permission, not hidden terms of use), and prohibits deceptive "dark patterns." The law applies to all chatbot providers within Vermont, directly affecting users who interact with these services. Key provisions mandate transparent data handling, user access to their input/output data, and strict rules against misleading consent practices.

Topics ✓ TechnologySupports TechnologyMandates data privacy protections, AI transparency disclosure, and prohibits deceptive dark patterns - directly advancing consumer protection in AI technology95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

introduced · Vermont · House May 20, 2025

H 520: An act relating to the right of users to control their social media data

H 520 is a bill that proposes to enhance individual users' control over their data on social media platforms. It aims to require social media companies to provide users with the ability to delete their personal data. Additionally, the bill mandates that companies allow users to obtain their data in a portable format and transfer it to other social media platforms.

Topics ✓ TechnologySupports TechnologyBill mandates social media companies to allow user data deletion and portability, directly advancing data privacy protections and user control per topic indicators.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track