Vermont Enacts Privacy Legislation to Regulate Health-Related Information
Vermont has signed two new privacy laws targeting health-related data. One regulates direct-to-consumer genetic testing companies; the other is a broader privacy statute that carves out stronger protections specifically for consumer health data.
Why this matters: Health data is the most personal category there is. It can affect your insurance, your job, your relationships, and your safety. Vermont is now one of a small group of states that treats it differently from ordinary consumer data — and genetic data gets its own law on top of that. Direct-to-consumer DNA tests are a real gap. People spit in a tube without thinking much about who owns that data afterward or what they can do with it. These laws put real limits on that. Other states are watching.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · Cybersecurity · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.