Cybersecurity Policy Report, Vermont Lawmakers to Consider Age-Appropriate Design Code Act, (Feb 24, 2025)
Organizations Mentioned:Computer & Communications Industry Association
The Vermont state Senate Committee on Institutions meets Wednesday to consider a bill that seeks to establish a comprehensive framework for protecting the privacy and personal data of minors who access online services, products, or features.
SB 69, or the Vermont Age-Appropriate Design Code Act, would require businesses to provide tools for minors to manage their privacy settings and delete their accounts and would prohibit certain data practices, such as sending push notifications during late-night hours. It would also require businesses to configure all default privacy settings provided to a minor through the online service, product, or feature to the highest level of privacy.
The bill would direct the state attorney general to adopt rules to ensure compliance and update the rules at least every two years to keep pace with technological advancements.
The legislation (S.B. 69, Reg Sess.) is set to take effect on July 1, 2026.
In recent testimony, the Computer & Communications Industry Association said the bill raised “significant questions about privacy, data security, and First Amendment rights for young users.”
“While the new legislation has improved certain provisions since a similar measure was vetoed last year, the VAADC continues to require de facto age assessment measures that could compromise personal data, restrict internet access for minors, and create conflicts with Vermont’s broader data privacy efforts. These ongoing issues highlight the need for lawmakers to carefully reconsider the bill’s unintended consequences before moving forward,” CCIA said.
News: StateLegislation DataPrivacy