Consumer health data privacy [Effective January 1, 2028]
9 V.S.A. § 2415k
proposed2415k. Consumer health data privacy [Effective January 1, 2028]
A person shall not:
(1) provide any employee or contractor with access to consumer health data unless the employee or contractor is subject to a contractual or statutory duty of confidentiality;
(2) provide any processor with access to consumer health data unless the person and processor comply with section 2415f of this subchapter;
(3) use a geofence to establish a virtual boundary that is within 1,850 feet of any health care facility, including any mental health facility or reproductive or sexual health facility, for the purpose of identifying, tracking, collecting data from, or sending any notification to a consumer regarding the consumer’s consumer health data; or
(4) sell, or offer to sell, consumer health data without first obtaining the consumer’s consent.
Added 2025, No. 145 (Adj. Sess.), § 1, eff. January 1, 2028.
Source: Vermont General Assembly (legislature.vermont.gov)URL: https://legislature.vermont.gov/statutes/section/09/061a/02415kFetched: 10/21/2026