The bill H.639 introduces the Genetic Information Privacy Act, which aims to enhance the privacy and protection of genetic data in Vermont. It establishes definitions for key terms such as "consumer," "genetic data," and "direct-to-consumer genetic testing company," and sets forth requirements for these companies regarding the collection, use, and disclosure of genetic data. Companies are required to provide clear privacy policies, obtain express consent from consumers for various uses of their genetic data, and allow consumers to easily revoke consent and request the destruction of their biological samples. Additionally, the bill mandates that companies implement reasonable security measures to protect genetic data and restrict storage to jurisdictions not sanctioned by the U.S. government.

The legislation also includes provisions that prohibit discrimination against consumers based on their exercise of rights regarding genetic data, ensuring that entities cannot deny goods or services or charge different prices based on these rights. It restricts the disclosure of genetic data to insurance or employment entities without a search warrant or the consumer's express consent. Furthermore, contracts between genetic testing companies and service providers must include clauses that prevent the retention, use, or disclosure of biological samples or genetic data for commercial purposes beyond the specified services, with immediate destruction required upon contract termination. The act will take effect on July 1, 2026, and will not diminish existing privacy protections under state and federal laws.