Vote Smart's Synopsis:

Vote to override a Governor's veto and pass a bill that authorizes data privacy reforms and protections in Vermont.

Highlights:

• Authorizes various state consumer data privacy reforms and protections in Vermont, including over affiliates, consumer health data, consumer reporting agencies, data brokers, covered entities, credit unions, and biometric data (Sec. 2415):

• Defines “affiliate” as a legal entity that shares a common branding with another legal entity or controls is controlled by, or is under common control with another legal entity (Sec. 2415).

• Defines “consumer health data” as any personal data that a control uses to identify a consumer’s physical or mental health condition or diagnosis including gender-affirming health data and reproductive or sexual health data (Sec. 2415).

• Defines “consumer reporting agencies” and “data brokers for the purposes of this bill as having the same definitions as previous legislation (Sec. 2415).

• Defines “biometric data” to include the following, including (Sec. ):

• Iris or retina scans;

• Fingerprints;

• Facial or hand mapping, geometry, or templates;

• Vein patterns;

• Voice prints; and

• Gait or personally identifying physical movements or patterns.

• Specifies that biometric data does not include (Sec. 2415):

• A digital or physical photograph;

• A digital or physical photograph;

• An audio or video recording; or

• Any data generated from a digital or physical photograph or audio or video recording.

• Specifies that the provisions of this bill shall take effect immediately upon passage and approval by the governor (Sec. 2415).

Full Bill Text

Vote Smart's Synopsis:

Vote to override a Governor's veto and pass a bill that authorizes data privacy reforms and protections in Vermont.

Highlights:

• Authorizes various state consumer data privacy reforms and protections in Vermont, including over affiliates, consumer health data, consumer reporting agencies, data brokers, covered entities, credit unions, and biometric data (Sec. 2415):

• Defines “affiliate” as a legal entity that shares a common branding with another legal entity or controls is controlled by, or is under common control with another legal entity (Sec. 2415).

• Defines “consumer health data” as any personal data that a control uses to identify a consumer’s physical or mental health condition or diagnosis including gender-affirming health data and reproductive or sexual health data (Sec. 2415).

• Defines “consumer reporting agencies” and “data brokers for the purposes of this bill as having the same definitions as previous legislation (Sec. 2415).

• Defines “biometric data” to include the following, including (Sec. ):

• Iris or retina scans;

• Fingerprints;

• Facial or hand mapping, geometry, or templates;

• Vein patterns;

• Voice prints; and

• Gait or personally identifying physical movements or patterns.

• Specifies that biometric data does not include (Sec. 2415):

• A digital or physical photograph;

• A digital or physical photograph;

• An audio or video recording; or

• Any data generated from a digital or physical photograph or audio or video recording.

• Specifies that the provisions of this bill shall take effect immediately upon passage and approval by the governor (Sec. 2415).

Vetoed by Governor Phil Scott