VT H0639

Direct-to-consumer genetic testing companies must obtain separate express consent from Vermont consumers for collecting genetic data, storing biological samples after testing, sharing data with third parties, and marketing based on genetic information

Consumers have the right to access their genetic data, delete their accounts and data, and request destruction of biological samples within 30 days of revoking consent

Companies are prohibited from disclosing genetic data to health insurers, life insurers, long-term care insurers, disability insurers, or employers, and cannot share consumer information with government entities without a search warrant or consumer consent

Genetic data and biological samples cannot be stored in countries sanctioned by the U.S. Office of Foreign Assets Control or designated as foreign adversaries, and international transfers require express consumer consent

Violations constitute unfair and deceptive acts in commerce enforceable by the Vermont Attorney General, with the act taking effect July 1, 2026