The Vermont Statutes Online
The Statutes below now include the actions of the 2026 session of the General Assembly.
NOTE: The Vermont Statutes Online is an unofficial copy of the Vermont Statutes Annotated that is provided as a convenience.
Title 9 : Commerce and Trade
Chapter 061a : Data Privacy [Effective January 1, 2028]
Subchapter 001 : Vermont Data Privacy and Online Surveillance Act [Effective January 1, 2028]
-
§ 2415k. Consumer health data privacy [Effective January 1, 2028]
A person shall not:
(1) provide any employee or contractor with access to consumer health data unless the employee or contractor is subject to a contractual or statutory duty of confidentiality;
(2) provide any processor with access to consumer health data unless the person and processor comply with section 2415f of this subchapter;
(3) use a geofence to establish a virtual boundary that is within 1,850 feet of any health care facility, including any mental health facility or reproductive or sexual health facility, for the purpose of identifying, tracking, collecting data from, or sending any notification to a consumer regarding the consumer’s consumer health data; or
(4) sell, or offer to sell, consumer health data without first obtaining the consumer’s consent. (Added 2025, No. 145 (Adj. Sess.), § 1, eff. January 1, 2028.)