United States of America: Introduced Vermont My Health My Data Act to Regulate Consumer Health Data (SB 173)

On 3 January 2024, the Vermont My Health My Data Act (SB 173) was introduced to the Senate of Vermont. The Act proposes to regulate the collection, sharing, and selling of consumer health data in Vermont. The Act aims to prohibit the disclosure of protected health data and aims to establish privacy protections for health data collected by nonspecific healthcare entities, such as applications and websites. The Act would require entities to comply with additional disclosures and obtain consumer consent for the collection, sharing, and use of health data. The Act would give consumers the right to have their health data deleted and prohibit the selling of health data without valid consumer authorisation. Furthermore, the Act makes it unlawful to utilise a geofence around a facility that provides health care services. The Act, if adopted, would come into force on 1 January 2025.