Bill > H0639

This bill, titled the "Genetic Information Privacy Act," establishes new protections for the genetic data of Vermont residents collected by direct-to-consumer genetic testing companies. It mandates that these companies provide clear and plain language summaries of their privacy practices, obtain explicit consent from consumers for the collection, use, and sharing of their genetic data, and allow consumers to easily access, delete, or request the destruction of their genetic data and biological samples. The bill also prohibits companies from sharing genetic data with entities involved in health or life insurance decisions or employment, and requires a warrant or explicit consumer consent for disclosure to government entities. Furthermore, it places restrictions on where genetic data can be stored, preventing storage in countries sanctioned by the U.S. Office of Foreign Assets Control or designated as foreign adversaries, and requires service providers to adhere to strict data handling and destruction protocols. The legislation also includes provisions against discrimination based on a consumer's exercise of their privacy rights and establishes a cure period for alleged violations before a consumer can file a civil action, with this cure period provision set to be repealed on June 30, 2028.