The proposed bill S.248 seeks to strengthen privacy protections for consumers' genetic data in Vermont by establishing a new chapter, Chapter 61A, titled "Data Privacy." This legislation requires direct-to-consumer genetic testing companies to limit the sharing of genetic data, ensure consumers have access to their own data, and obtain explicit consent for the collection, use, and disclosure of such information. Key provisions include the necessity for clear privacy notices, separate consent for different uses of genetic data, and the implementation of reasonable security measures to safeguard this sensitive information. The bill also prohibits the storage of genetic data in countries sanctioned by the U.S. and restricts the transfer of data outside the U.S. without consumer consent.

Additionally, the bill prohibits discrimination against consumers who exercise their rights under this subchapter, ensuring they are not denied goods or services or treated differently based on their exercise of these rights. It also restricts genetic testing companies from disclosing consumers' genetic data to entities involved in health or life insurance and employment decisions. The Attorney General is granted authority to enforce these provisions, and the bill clarifies that it does not diminish existing privacy protections under state and federal laws. The act is scheduled to take effect on July 1, 2026.