Bill H.360 aims to enhance privacy protections for individuals using mobile identification in Vermont. It introduces new definitions, such as "attribute authentication," which allows verification of specific qualities of data fields without disclosing the underlying information, and "selective disclosure," which permits the release of only necessary data fields during verification. The bill outlines the responsibilities of the Commissioner of Motor Vehicles in issuing mobile identifications, ensuring that they can produce both full and limited profiles while maintaining user consent for data access. Additionally, it mandates that verification systems must not retain or share information about who accessed the data, and they must utilize techniques to prevent linking data to individuals.
The bill also establishes strict privacy protections, prohibiting law enforcement from taking physical possession of devices containing mobile identifications and limiting data requests to what is necessary for transactions. It ensures that individuals cannot be coerced into providing their mobile identification for goods or services unless legally required. Enforcement mechanisms are included, allowing the Attorney General or State's Attorney to take action against violations, with specified penalties for negligent or intentional breaches of the provisions. The act is set to take effect on July 1, 2025.