This bill (S.297) allows Vermont towns, cities, and villages to adopt secure electronic ballot return systems for local elections using the Australian ballot method. It requires any adopted system to meet strict security standards - including end-to-end encryption, dual-factor authentication, and biometric verification - to protect voter data and ballot integrity. Municipal clerks must transcribe all electronic ballots to anonymous paper copies for counting, storage, and auditing, just like paper ballots. The bill takes effect July 1, 2026, and the Secretary of State must provide security and privacy guidance for municipalities. It directly affects local election administrators and voters in communities choosing to implement this option.
Tags
Elections
This bill, S.248 (Genetic Information Privacy Act), requires direct-to-consumer genetic testing companies operating in Vermont to protect the genetic data of Vermont residents. Companies must obtain explicit consumer consent before sharing data (prohibiting "dark patterns" like deceptive interfaces), allow consumers to access their own genetic data, and limit data sharing without permission. The law defines "genetic data" broadly to include DNA, RNA, SNPs, and derived information, but excludes de-identified data and data used in federally compliant research. It directly affects Vermont residents using genetic testing services and the companies providing those services within the state.
H 650 requires educational technology providers (like software companies) to annually register with Vermont’s Secretary of State by January 31, paying a $100 fee and submitting privacy policies. It mandates the Secretary of State to create certification standards for these products, ensuring they comply with privacy laws and avoid collecting sensitive student data (like health or behavioral information). Schools cannot use uncertified products, and certification must verify that products are designed for education, have clear privacy practices, and do not include features like targeted advertising or compulsive usage triggers. This directly affects tech providers and Vermont schools by establishing a formal review process before products can be used in classrooms.
S.213 requires Vermont public water systems to notify customers before installing smart meters and allow them to opt out. Customers can choose not to have wireless smart meters installed (though systems may charge for alternative meters), and can request removal of existing meters without fees. The bill applies to all public water systems serving 15+ connections or 25+ people annually. It also mandates cybersecurity measures for systems using smart meters by July 2027.
This Vermont bill (S.245) amends health care statutes to require both patient and provider consent before recording telehealth appointments or audio-only phone consultations. It directly affects healthcare providers and patients using telemedicine services, clarifying that recordings may only occur with explicit agreement from both parties. The key provision adds a dual-consent requirement to existing rules prohibiting unauthorized recordings during virtual or phone health visits. The bill does not create new recording rights but establishes a clear consent mechanism for existing telehealth practices.
H.846 requires high-traffic online platforms to block materially deceptive election content and label inauthentic or synthetic AI-generated content during specific periods before and after Vermont elections. It prohibits knowingly distributing deceptive election ads with malice within 120 days of an election. The bill also mandates that political advertisements created or altered using AI include a clear disclosure statement. These provisions directly affect online platforms, political advertisers, and election participants in Vermont.
H.829 requires businesses or organizations making robocalls with artificial voices (generated or altered using AI) to first play a natural, unrecorded voice announcement before delivering any prerecorded message. This announcement must state the call’s purpose, the caller’s name/address/phone number, ask if the recipient consents to hear the message, and disclose that an artificial voice will be used. The law applies to all robocallers in Vermont using AI-generated voices and imposes civil penalties of $500 for a first violation (rising to $1,000 for repeat offenses), plus potential criminal penalties of up to 90 days in jail or $1,000 per call for willful violations. It directly affects telemarketers, debt collectors, and other entities using automated calls with artificial voices within Vermont.
Vermont's H.812, the "Vermont Duty of Data Loyalty Act," requires businesses (called "covered entities") to handle consumer personal data responsibly by limiting how they store, share, or sell it. It directly affects Vermont consumers and businesses that collect personal data, excluding small businesses, government agencies, and employee data from its scope. Key provisions define "covered data" (information identifying individuals), prohibit selling data for cross-context behavioral advertising without consent, and create a "duty of data loyalty" for covered entities. The law aims to strengthen privacy protections by regulating data practices while specifying what data types and business types are excluded from coverage.
This bill authorizes Vermont's Board of Liquor and Lottery to sell lottery tickets, products, and subscriptions through mobile apps, mobile devices, or the internet, starting July 1, 2026. It requires all such sales to originate and be received within Vermont, prohibiting intentional routing outside the state. The bill also creates confidentiality protections for player information (like personal and financial details), business records, and security systems related to online sales. This directly affects Vermont residents who purchase lottery products online, allowing them to access these services through digital platforms while keeping certain data private.
This bill requires sellers and lessors to make it significantly easier for consumers to cancel automatic renewal contracts, particularly those sold online. It mandates clear "opt-in" consent (not automatic opt-out), 30-60 day advance notices before renewal, and simple cancellation methods (like online tools matching how the contract was signed). It applies to contracts with an initial term of one month or longer, directly affecting consumers who use subscription services and the businesses offering them. The law aims to prevent surprise renewals by ensuring cancellation is as straightforward as signing up.