Generates content with AI, in Vermont

9 V.S.A. § 2445 (Added 2005, No. 162 (Adj. Sess.), § 1, eff. Jan. 1, 2007) · Read the law's page

• This binds a business, any sole proprietorship, partnership, corporation, association, limited liability company or other group however organized and whether or not organized to operate at a profit, including a financial institution, but never the State, a State agency or a political subdivision of the State; a customer's personal information covered is a signature, Social Security number, physical description, passport number, driver's license or State identification card number, insurance policy number, bank account number, credit card number, debit card number, or other financial information.
• Take all reasonable steps to destroy or arrange for the destruction of a customer's records containing personal information once the business no longer retains them, by shredding, erasing or otherwise modifying the information to make it unreadable or indecipherable through any means.
• An entity in the business of disposing of personal financial information on another business's behalf must implement and monitor policies and procedures that protect against unauthorized access to or use of the information during and after its collection, transportation and disposal.
• This duty applies to disposal only; it does not itself require safeguarding personal information that remains in active use, and it exempts a Gramm-Leach-Bliley-compliant financial institution, a HIPAA-compliant health insurer or facility, and an FCRA-compliant consumer reporting agency.
• A violation is investigated and prosecuted by the Attorney General or a State's Attorney, who may seek remedies under the Consumer Protection Act including a civil penalty of up to $10,000.00 for each violation, or by the Department of Financial Regulation for a business it licenses or registers, which acts under its own Title 8 and Title 9 powers; the section does not itself state whether a violation carries a private right of action.

13 V.S.A. § 2606 · Read the law's page

• Do not knowingly disclose a nude or sexually explicit visual image of an identifiable person, without that person's consent, with intent to harm, harass, or intimidate them, where the disclosure would cause a reasonable person to suffer harm.
• This reaches an image created or realistically altered by digitization, including one built from an image of a person other than the one depicted, or a wholly computer-generated image.
• Consent to the recording or production of an image does not by itself constitute consent to disclose it.
• Disclosure made with intent to profit financially draws a higher penalty tier.
• An operator of a website, online service, or application may not accept a fee or other consideration to remove, delete, or refrain from posting such an image when the depicted person requests it.
• A person harmed by a violation may bring a private civil action for damages and injunctive relief.

17 V.S.A. §§ 2031-2033, 2041-2042 · Read the law's page

• Within 90 days before a Vermont election, do not publish, communicate, or distribute synthetic media you know is deceptive and fraudulent synthetic media, meaning a realistic depiction of a candidate that injures their reputation, or of an individual providing materially false information to voters, unless the required disclosure is included.
• The disclosure must read: 'This media has been manipulated or generated by digital technology and depicts speech or conduct that did not occur,' shown for a video's full duration or read at intervals of not more than two minutes for audio.
• A bona fide newscast, a periodical of general circulation, satire or parody, and a telecommunications or interactive computer service passing through another person's content are each exempted, subject to conditions set out in the act.
• A candidate misrepresented by such media may seek injunctive relief in addition to the Attorney General's or a State's Attorney's own enforcement authority.

2026 Vt. Acts & Resolves Act No. 156 (H.816); 18 V.S.A. § 7115; 3 V.S.A. § 129a(a)(30); 26 V.S.A. § 1354(a)(3) · Read the law's page

• Do not provide, advertise, or otherwise offer mental health services to the public, including through the use of artificial intelligence, unless a mental health professional provides them or they are part of an approved institutional review board or privacy board study.
• Mental health services are services provided to diagnose, treat, or address an individual's mental health or behavioral health through therapeutic communications and therapeutic decisions.
• A mental health professional may use artificial intelligence tools that comply with the Health Insurance Portability and Accountability Act of 1996 within the professional's scope of practice only if the professional reviews and approves any mental health services.

2026 Vt. Acts & Resolves Act 101 (H.814); 3 V.S.A. ch. 69 (amending); effective July 1, 2026

• Disclose whenever artificial intelligence is used to make or inform a decision affecting an individual in a health or human services context, including clinical care, insurance coverage determinations, or a chatbot substituting for a licensed mental health professional.
• Notify affected individuals when using artificial intelligence to evaluate prior authorizations or coverage.
• Obtain informed consent before collecting neural data through a brain-computer interface.
• Delete neural data within 10 days of the individual revoking consent.