Bill > H0639

This bill, titled the "Genetic Information Privacy Act," aims to protect the genetic data of Vermont residents by imposing new requirements on direct-to-consumer genetic testing companies and related providers. Key provisions include requiring these companies to obtain explicit consent from consumers before collecting, using, or sharing their genetic data, with separate consent needed for various uses like storage of biological samples, sharing with third parties, and marketing. The bill also mandates that companies provide clear privacy notices, allow consumers to access and delete their data, and implement reasonable security measures to protect this sensitive information. Furthermore, it prohibits the storage of genetic data in countries sanctioned by the U.S. Office of Foreign Assets Control or designated as foreign adversaries, and restricts disclosure of genetic data to health insurers, life insurers, employers, or government entities without a warrant or explicit consumer consent. The legislation also includes provisions against discrimination based on the exercise of these privacy rights and outlines enforcement mechanisms through the Attorney General. Importantly, the bill clarifies that it does not reduce existing privacy obligations and specifies certain exemptions, such as for protected health information governed by HIPAA (Health Insurance Portability and Accountability Act) and for scientific research conducted under specific federal guidelines.

Business and Industry, Housing and Urban Affairs

https://legislature.vermont.gov/bill/status/2026/H.639