An act relating to genetic data privacy

1. **ONE-SENTENCE SUMMARY:** This bill establishes privacy protections for individuals' genetic data, requiring businesses to handle such data with care and transparency. 2. **KEY REQUIREMENTS:** - Obtain explicit consent from individuals before collecting or using their genetic data. - Clearly inform individuals about how their genetic data will be used, stored, and shared. - Implement reasonable security measures to protect genetic data from unauthorized access. - Allow individuals to access their genetic data and request its deletion. 3. **DEADLINES:** - The law will take effect on July 1, 2024. - Businesses must be compliant by this date. 4. **PENALTIES:** - Violations may result in fines up to $10,000 per incident. - Enforcement will be handled by the Vermont Attorney General's office. 5. **SMB IMPACT:** Small businesses that collect genetic data will need to update their consent processes and data security measures, which may require additional resources or training. Compliance with this law is essential to avoid significant fines.