VT S0069

Establishes the Vermont Age-Appropriate Design Code Act requiring online businesses that generate a majority of revenue from online services and are reasonably likely to be accessed by minors (under 18) to implement privacy protections for minors' data

Imposes a minimum duty of care on covered businesses to ensure their data use and design will not cause foreseeable emotional distress, compulsive use, or discrimination against minors based on protected characteristics

Requires highest-level default privacy settings for minors on social media platforms, including hiding accounts and content from adult users, disabling direct messaging with adults, blocking location sharing, and disabling push notifications unless the minor expressly opts in

Prohibits covered businesses from collecting, selling, or retaining minors' personal data beyond what is necessary, using personal data for algorithmic recommendations (with limited exceptions), sending push notifications between midnight and 6:00 a.m., or allowing parental monitoring without notifying the minor

Attorney General must adopt rules by January 1, 2027 on age assurance methods and prohibited design practices; violations constitute unfair and deceptive acts enforceable under consumer protection law; main provisions take effect January 1, 2027