Technology (Cybersecurity)

This bill (H.560) amends Vermont's Cybersecurity Advisory Council membership by adding three new positions: the Chair of the House Committee on Energy and Digital Infrastructure, the Chair of the Senate Committee on Institutions, and a representative from the Judiciary appointed by the Chief Justice. The Council advises the state on cybersecurity infrastructure, best practices, communications protocols, and safeguards. These changes aim to strengthen legislative and judicial input into cybersecurity planning. The bill takes effect on July 1, 2026.

S.213 requires Vermont public water systems to notify customers before installing smart meters and allow them to opt out. Customers can choose not to have wireless smart meters installed (though systems may charge for alternative meters), and can request removal of existing meters without fees. The bill applies to all public water systems serving 15+ connections or 25+ people annually. It also mandates cybersecurity measures for systems using smart meters by July 2027.

H 752 requires Vermont's Agency of Digital Services to annually review all state government computer systems that make decisions (like benefits or permits) for cybersecurity risks and personal data vulnerabilities. The bill amends state law (sections 3303 and 3305) to mandate that the Agency's annual inventory of these systems include assessments of privacy risks and cybersecurity safeguards. If a system is found to pose significant risks, the Agency can formally request that state agencies terminate its use. This directly affects all Vermont state departments using automated decision systems that process personal data or make government decisions.