Consumer Health Data Privacy
Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.
What it requires
Applies regardless of the Act's general size thresholds. Bars sale of consumer health data without consent, requires confidentiality obligations for employees/contractors and processors with health-data access, and prohibits geofencing within 1,850 feet (widened from the 1,750 feet proposed in the introduced bill) of any health care, mental health, or reproductive/sexual health facility for tracking or notification purposes.
Legal text (excerpt)
A person shall not: ... (3) use a geofence to establish a virtual boundary that is within 1,850 feet of any health care facility, including any mental health facility or reproductive or sexual health facility, for the purpose of identifying, tracking, collecting data from, or sending any notification ...; or (4) sell ... consumer health data without first obtaining the consumer's consent.
Primary source
Vermont Office of the Attorney General: § 2415k: Consumer Health Data Privacy ↗Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.