Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Genetic Data Privacy topic
No spam. Unsubscribe anytime.
Committee reviews H.639 to tighten protections for consumer genetic testing data
Summary
An assistant attorney general walked the committee through H.639, a bill focused on consumer genetic‑data protections prompted by a large commercial breach and bankruptcy. The bill would require express consent for data transfers, parity of safeguards for labs and contractors, deletion/retention options, and limited law‑enforcement access by warrant; rulemaking and enforcement details remain to be worked out.
The Senate Economic Development, Housing & General Affairs committee heard a detailed presentation on H.639, a bill aimed at protecting Vermonters’ genetic information collected through direct‑to‑consumer testing services.
An assistant attorney general (representing Dalo’s office) told the committee the bill responds to a gap exposed during a high‑profile company bankruptcy and data breach and is modeled in part on California law. The presenter said H.639 would require clear, conspicuous notice and affirmative consent for any transfer or sale of consumer genetic data, require front‑end companies to ensure labs and contractors hold and destroy data when consumers request it, and prohibit differential treatment (for example, charging more) when consumers exercise their privacy rights.
The presenter emphasized the difference between direct consumer genetic testing and medical testing, noting the bill carves out health‑care provider testing (which remains governed by HIPAA and other medical privacy rules). On enforcement, the presenter said the bill ties consumer protections to standard consumer‑protection remedies and procedures used in other state statutes, while also noting that practical questions remain about retention windows and the operational burdens of deletion across contracted labs and vendors.
Committee members asked whether companies could identify Vermont residents for coverage, how deletion requests would propagate to third‑party labs, and whether law enforcement would still have access. The presenter said protections would apply to a consumer when they are a Vermont resident, that deletion and retention questions may require technical and contractual solutions, and that law enforcement access would continue to require appropriate legal process (for example, a warrant) when courts or statutes permit it.
No final action was taken; committee members requested additional technical feedback from stakeholders (consumer testing companies, labs, and the judiciary) on counts, retention windows, and operational feasibility before advancing the bill.
