Bill > H0360

This bill establishes comprehensive privacy protections for mobile identification (mobile ID) in Vermont, defining new terms and setting strict guidelines for how mobile IDs can be used and verified. The bill requires that mobile IDs be an additional option to, not a replacement for, traditional physical credentials, and mandates a verification system that prioritizes user consent and data minimization. Key provisions include requiring attribute authentication (verifying specific data qualities without revealing underlying details), allowing selective disclosure where users can choose which data fields to share, and preventing the retention or linking of verification data. The bill prohibits entities from compelling mobile ID use, taking possession of a user's device, or requesting more information than necessary. It also establishes enforcement mechanisms, allowing the Attorney General or individual users to bring civil actions against entities that violate the privacy protections, with potential damages ranging from $2,500 for negligent violations to $5,000 for intentional violations. The mobile ID system is designed to give users maximum control over their personal information, ensuring that only necessary data is shared during verification processes, and protecting against unauthorized data collection or tracking. The bill is set to take effect on July 1, 2025, giving state agencies and potential users time to prepare for the new mobile identification system.

Business and Industry

https://legislature.vermont.gov/bill/status/2026/H.360