VDPOSA § 2415k
Consumer Health Data Privacy
Reference only. The Privisy audit does not test this section.
- Source
- Statute
- In force from
- January 1, 2028
- Last reviewed
- September 2026
- Framework
- VDPOSA
What it requires
Applies regardless of the Act's general size thresholds. Bars sale of consumer health data without consent, requires confidentiality obligations for employees/contractors and processors with health-data access, and prohibits geofencing within 1,850 feet (the distance in the bill as introduced; the Senate-passed version had narrowed it to 1,750 feet, and the House restored 1,850) of any health care, mental health, or reproductive/sexual health facility for tracking or notification purposes.
Statute text
A person shall not: ... (3) use a geofence to establish a virtual boundary that is within 1,850 feet of any health care facility, including any mental health facility or reproductive or sexual health facility, for the purpose of identifying, tracking, collecting data from, or sending any notification ...; or (4) sell ... consumer health data without first obtaining the consumer's consent.
Vermont Data Privacy and Online Surveillance Act, § 2415kRead the full section from Vermont Office of the Attorney General
This page is for information only and is not legal advice. The excerpt is reproduced from official public sources and was checked against them on the last-reviewed date above. Laws change: check the authoritative source and consult a licensed attorney for compliance guidance.