Bill > S0069

This bill establishes the Vermont Age-Appropriate Design Code Act, which creates comprehensive privacy and safety regulations for online services, products, and features that are likely to be accessed by minors. The bill requires covered businesses to implement high-privacy default settings for minors, such as disabling public visibility of accounts, preventing direct messaging with adults, and stopping push notifications. Businesses must provide transparent information about their algorithmic recommendation systems, data collection practices, and privacy policies. The law prohibits collecting or using minors' personal data beyond what is necessary to provide the specific service, and restricts using personal data to recommend or prioritize content. Businesses must also provide tools for minors to delete their accounts and ensure that default privacy settings are at the highest protection level. The bill defines key terms like "covered minor" (under 18), "personal data," and "covered business," and establishes that businesses owe a "minimum duty of care" to minors, ensuring that their online experiences do not cause emotional distress, encourage compulsive use, or result in discrimination. The Attorney General will have enforcement powers, and the act will take effect on January 1, 2027, with some rulemaking provisions becoming effective earlier in July 2025.

Business and Industry, Government Affairs

https://legislature.vermont.gov/bill/status/2026/S.69