H.210 is a proposed bill that aims to establish the Vermont Age-Appropriate Design Code Act, which seeks to protect minors from harmful design features in online services and products. The bill requires businesses whose online offerings are likely to be accessed by minors to follow specific guidelines to ensure the safety and privacy of children. It introduces comprehensive definitions related to personal data, age assurance, and various types of data processing, including biometric and genetic data, to clarify the responsibilities of these businesses. The legislation emphasizes the importance of age assurance methods and outlines obligations regarding personal data handling, including prohibiting compulsive use that disrupts minors' daily activities.
Additionally, the bill mandates that covered businesses provide a minimum duty of care to minors, ensuring that their online services do not cause emotional distress. It requires default privacy settings to be set to the highest level of protection, prohibits unnecessary data collection, and mandates timely account deletion upon request. The bill also includes specific exclusions, such as government entities and protected health information under HIPAA, and emphasizes transparency in privacy policies. It grants the Attorney General enforcement authority and clarifies that the legislation will not impose liability that contradicts existing federal law, ensuring that the rights of covered minors are upheld. The act is set to take effect on July 1, 2026, allowing time for businesses to comply with the new regulations.