Bill H.639 seeks to enhance privacy protections for Vermont residents' genetic data through the establishment of the Genetic Information Privacy Act. The legislation requires direct-to-consumer genetic testing companies to implement stringent measures to protect consumer genetic data, including limiting data sharing and ensuring consumer access to their own data. Key provisions mandate that companies obtain explicit consent for various uses of genetic data, prohibit the retention or use of genetic data for commercial purposes beyond specified services, and establish guidelines for the destruction of biological samples upon revocation of consent. The bill emphasizes transparency in data practices and mandates reasonable security procedures to safeguard consumer information.

Additionally, the bill introduces protections against discrimination for consumers exercising their rights under this act, prohibiting companies from denying goods or services or altering pricing based on these rights. It also restricts the disclosure of genetic data to entities involved in health or life insurance and employment decisions. Enforcement mechanisms are outlined, granting the Attorney General the authority to investigate and act against violations. The bill clarifies that its provisions do not diminish existing privacy protections and specifies that in cases of conflicting laws, the one providing greater privacy protection will prevail. The act is set to take effect on July 1, 2026.