Bill > H0791

This bill, titled the "Vermont Government Data Practices Act," establishes new standards for how State government agencies handle personal information of Vermonters, defining "personal information" broadly to include identifiers like names and addresses, sensitive data like health and genetic information, and even "neural data" (information derived from nervous system activity). Agencies are required to collect personal information directly from individuals whenever possible, maintain its accuracy, and only store what is relevant and necessary for legitimate purposes or as required by law. The bill outlines specific circumstances under which agencies can disclose personal information, generally requiring individual consent or a clear legal basis, and prohibits the commercial sale of personal information. It grants individuals the right to access and request amendments to their own records, with provisions for appeals and exemptions for certain law enforcement or investigative information. The bill also mandates agencies to implement safeguards for data security, report data breaches, and establishes penalties for violations, including civil actions for damages and potential disciplinary action or criminal charges for employees. The Agency of Administration is tasked with creating rules to implement these provisions by March 1, 2027, with the act taking effect on July 1, 2027, except for rulemaking provisions which take effect upon passage.

Agriculture and Natural Resources

https://legislature.vermont.gov/bill/status/2026/H.791