Technology (Data Privacy)

passed · Vermont · House Apr 2, 2025

H 342: An act relating to protecting the personal information of certain public servants

H 342 protects the personal information of specific Vermont public servants and their families by restricting data brokers from disclosing certain details. It applies to judges, law enforcement officers, prosecutors, public defenders, parole/probation officers, and related staff (including their immediate families), prohibiting brokers from sharing home addresses, phone numbers, email addresses, Social Security numbers, driver's license numbers, and vehicle identifiers. Covered individuals can request brokers stop sharing their protected information within 15 days, with violations subject to $10,000 civil penalties. The law excludes government agencies from being classified as "data brokers" under this provision.

Topics ✓ TechnologySupports TechnologyRestricts data brokers from sharing personal info of public servants, directly strengthening data privacy protections per bill's scope.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · Senate Feb 19, 2025

S 74: An act relating to the collection, sharing, and selling of consumer health data

S 74, the Vermont My Health My Data Act, regulates how businesses collect, share, and sell Vermont residents' health data. It directly affects Vermont residents and any company handling their health information within the state. Key provisions require clear consumer consent before collecting or sharing data (prohibiting deceptive "dark patterns" in terms of use), grant consumers the right to delete their data, and ban selling health data without explicit authorization. The law specifically protects sensitive health information - including reproductive care, gender-affirming treatment, and biometric data - and prohibits tracking near healthcare facilities through geofencing.

Topics ✓ TechnologySupports TechnologyRegulates health data collection/sharing with consent requirements and deletion rights, strengthening consumer privacy protections95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Jan 24, 2025

H 93: An act relating to the creation and maintenance of a database of veterans in Vermont

This bill requires Vermont's Office of Veterans Affairs to create and maintain a database of state veterans, collecting personal information from state agencies. It mandates that all state agencies provide veteran data "to the maximum extent practicable" while keeping all personally identifying details exempt from public records requests under Vermont law. The database will be confidential, with information protected from public inspection or copying, even overriding standard public records exemptions. The law takes effect on July 1, 2025, and directly affects Vermont veterans whose personal details are collected, as well as state agencies responsible for sharing that data.

Topics ✓ TechnologySupports TechnologyBill mandates confidentiality for veteran data and exempts personal details from public records, directly protecting data privacy as a core technology policy.90% confidence

Sub-Topics Data Privacy

Track

introduced · Vermont · Senate Feb 27, 2025

S 93: An act relating to consumer data privacy

S 93, the Vermont Data Privacy Act, would give Vermont residents new rights over their personal data, including the ability to access, correct, delete, and opt out of certain uses by businesses. It specifically strengthens protections for sensitive health data like reproductive, sexual, and gender-affirming health information, requiring businesses to obtain clear, affirmative consent without deceptive "dark patterns." The bill prohibits companies from using precise geolocation data or biometric information without explicit permission and sets strict rules for how businesses must handle personal data. These provisions would directly affect Vermont residents and all businesses collecting their data within the state.

Topics ✓ HealthcareSupports HealthcareExplicitly strengthens protections for sensitive health data (reproductive, sexual, gender-affirming) requiring affirmative consent, aligning with patient rights protection in healthcare data privacy.95% confidence ✓ TechnologySupports TechnologyStrengthens consumer data privacy rights, mandates consent for sensitive health data, prohibits misuse of geolocation/biometrics - directly protects digital rights95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

introduced · Vermont · House Feb 26, 2025

H 391: An act relating to the disclosure of transactions involving personally identifiable information

This bill (H 391) requires businesses to publicly disclose the revenue they earn from transactions involving personally identifiable information (PII). It directly affects companies that collect and monetize customer data, such as those using personal information for targeted advertising or data sales. The key provision mandates businesses to report the specific amount of revenue generated from PII transactions to the public. This would increase transparency about how personal data is commercially exploited. The bill is currently pending in the Committee on Commerce and Economic Development.

Topics ✓ TechnologySupports TechnologyBill mandates public disclosure of revenue from PII transactions, enhancing data privacy transparency and consumer protection for technology companies handling personal data.90% confidence

Sub-Topics Data Privacy

Track

passed · Vermont · House May 29, 2025

HR 9: House resolution urging that all State agencies, departments, and offices protect the civil rights, medical confidentiality, and all aspects of personal privacy of Vermonters who have been diagnosed with autism in light of the Secretary of the U.S. Health and Human Services’ recently announced plans to establish an autism research database and other databases related to autism

This Vermont House resolution (HR 9) urges all state agencies to protect the privacy and medical confidentiality of Vermonters diagnosed with autism, specifically in response to federal plans for an autism research database. It directly affects autistic Vermonters by seeking to prevent their personal health data - like medical records, insurance claims, and wearable device information - from being collected or shared without informed consent. The resolution emphasizes that autism is a neurological difference, not a disease, and highlights concerns about federal data collection practices that lack explicit privacy safeguards. As a non-binding resolution, it directs state officials to uphold privacy rights and has been formally adopted by the House.

Topics ✓ HealthcareSupports HealthcareProtects patient privacy rights for autism-related health data, aligning with healthcare protection indicators like medical confidentiality.95% confidence ✓ TechnologySupports TechnologyPrevents unauthorized collection/sharing of personal health data without consent, directly protecting privacy in data systems per technology policy guidelines95% confidence

Sub-Topics Data Privacy

Track

signed · Vermont · Senate Jun 13, 2025

S 69: An act relating to an age-appropriate design code

This bill, S 69 (Vermont Age-Appropriate Design Code Act), requires online services popular with minors to redesign their platforms to protect children’s privacy and safety. It directly affects businesses that generate most revenue from online services likely accessed by Vermont minors under 18 and collect their personal data. Key provisions mandate age-assurance methods to identify minors, set default privacy settings to the most protective level, ban features causing "compulsive use" (like addictive content algorithms), and restrict data collection for minors. The law also defines strict rules for handling biometric, genetic, and derived data of minors, ensuring data processing aligns with their developmental needs. It applies broadly to digital products like apps and websites, excluding physical products and basic internet services.

Topics ✓ TechnologySupports TechnologyMandates age-assurance, default privacy settings, and bans compulsive features to protect minors' data privacy, aligning with consumer protection indicators.95% confidence

Sub-Topics Data Privacy Digital Government

introduced · Vermont · House Feb 12, 2025

H 210: An act relating to an age-appropriate design code

This bill requires online businesses likely to be accessed by children to avoid using design features that are harmful or overly invasive of children's privacy. It defines "covered businesses" as those with online services reasonably likely to be used by minors and mandates that these businesses set privacy settings to the most protective default for children. Key provisions prohibit design features causing compulsive use (like endless scrolling) and require businesses to handle children's personal data with heightened safeguards. The law applies to Vermont-based businesses offering online products or services to minors, aiming to protect children's privacy through proactive design standards.

Topics ✓ TechnologySupports TechnologyRequires protective privacy defaults for children's online services, prohibiting invasive design features. Directly advances data privacy protections for minors.95% confidence

Sub-Topics Data Privacy Digital Government

Track

signed · Vermont · House May 29, 2026

H 211: An act relating to data brokers and personal information

This bill (H 211) requires data brokers in Vermont to notify consumers if their personal information is involved in a security breach, certify that data is used for legitimate purposes, and provide an accessible way for consumers to request deletion of their information. It directly affects Vermont residents whose personal data is collected and sold by businesses without a direct customer relationship (e.g., companies selling addresses, phone numbers, or biometric data). Key provisions define "data brokers" narrowly to exclude businesses with direct customer ties (like retailers or employers) and clarify that publicly available business information isn’t covered. The bill aims to strengthen protections for consumer data by adding specific obligations for brokers handling sensitive information like Social Security numbers or biometric identifiers.

Topics ✓ TechnologySupports TechnologyBill mandates data brokers to notify breaches, certify legitimate use, and enable data deletion - directly strengthening consumer data privacy protections per technology policy indicators.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

introduced · Vermont · Senate Feb 18, 2025

S 70: An act relating to data brokers and personal information

This Vermont bill (S 70) requires data brokers - businesses that collect and sell personal information about consumers without a direct relationship (like a customer or employee) - to take specific steps to protect residents' privacy. It mandates that data brokers notify consumers of security breaches involving personal data, certify that data is used for legitimate purposes, and provide an accessible way for consumers to request deletion of their information. The bill directly affects Vermont residents whose personal data is collected by these brokers and sets clear rules for how brokers must handle and protect that information. It does not apply to businesses sharing publicly available business or professional information or those maintaining directory services.

Topics ✓ TechnologySupports TechnologyMandates data brokers to protect privacy via breach notifications, legitimate use certification, and deletion requests - directly strengthening consumer data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track