WeVote
Log In

Bill

Bill

S 90

An act relating to employee privacy protections

2025-2026 Regular Session Introduced by Tanya Vyhovsky

The bill strengthens Vermont employee privacy by limiting intrusive monitoring, requiring consent and notices, data minimization, access rights, and security protections.

Read 1st time & referred to Committee on Economic Development, Housing and General Affairs
0
WeVote Research Nonpartisan
Bill Summary · S 90

Summary: S.90 – An act relating to employee privacy protections (Vermont, 2025-2026)

Purpose and overarching intent

S.90 proposes to strengthen protections around employee privacy in Vermont. The bill is designed to govern how employer actions and data practices interface with workers’ personal information, aiming to curb invasions of privacy while establishing clear standards for data handling, monitoring, and related requirements.

Key provisions and changes (highlights)

Note: The following provisions reflect the bill’s core themes as described in the committee materials and title. The exact statutory language may include additional detail; refer to the text for precise definitions and scope.

  • Prohibition or limitation on certain monitoring practices: The bill likely restricts employer surveillance and monitoring of employees in ways that intrusively collect personal information or monitor activities outside of legitimate business needs. This could include prohibitions or guardrails on tracking software, monitoring of private communications, or location tracking without consent or a lawful basis.

  • Consent and notice requirements: Employers may be required to provide notice to employees about what data is collected, how it is used, and with whom it is shared. There may be specific consent requirements for sensitive data or for certain types of monitoring.

  • Data minimization and purpose limitation: Standards to collect only information that is necessary for legitimate business purposes, and to retain data no longer than necessary. The bill could require deletion or secure disposal of data after a defined period or once it serves its purpose.

  • Access, accuracy, and correction rights: Employees might gain rights to access their data held by employers, request corrections, and challenge inaccuracies.

  • Security safeguards: Employers could be required to implement reasonable security measures to protect employee data from unauthorized access, disclosure, or breach. This may include written data protection policies, encryption, access controls, and breach notification protocols.

  • Parental/employee categories and protected information: The bill may specify which categories of employees (e.g., current employees, contractors, interns) are covered, and define protected data such as social security numbers, health information, biometric data, and other personally identifiable information.

  • Enforcement and penalties: Provisions outlining how the law would be enforced, which agency would oversee compliance, potential civil penalties, and remedies for violations. There may be a process for investigations and administrative actions.

  • Wage and hour or related employment protections intersection: Given the committee of origin (Economic Development, Housing and General Affairs) and the topic, there could be alignments with existing Vermont employment law, ensuring the privacy rules don’t conflict with wage-hour regulations or other worker protections.

Who would be affected

  • Employees and job applicants in Vermont: The primary rights and protections target individuals whose personal data could be collected or used by employers.
  • Employers in Vermont: Businesses and organizations would need to adjust data collection, storage, processing, and monitoring practices to comply with new standards. This may affect HR processes, IT systems, monitoring policies, and security investments.
  • Third-party contractors and service providers: If they process employee data on behalf of Vermont employers, they would also need to comply with privacy requirements or ensure contractual compliance.

Procedural and timeline aspects

  • Introduced and referred: The bill (S.90) was read a first time and referred to the Senate Committee on Economic Development, Housing and General Affairs on February 26, 2025.
  • Committee hearing and actions: The bill was scheduled for discussion in the Senate Committee on Economic Development, Housing and General Affairs, with noted meetings including a full committee hearing on April 24, 2025. The committee can amend, approve, or recommend the bill to the full Senate.
  • Subsequent steps: If advanced, the bill would move to the Senate floor for debate and potential passage, followed by reconciliation with any House version (if applicable) and eventual enactment into law, subject to standard Vermont legislative processes and timelines.

Practical implications

  • Employers should prepare by reviewing current data practices, enhancing privacy notices, evaluating monitoring tools, and implementing formal data security policies to align with anticipated standards.
  • Employees can anticipate clearer rights to information about data collection, potential access to their data, and stronger protections against intrusive data practices.
  • The bill’s enactment would shape the state’s approach to balancing workplace operational needs with individual privacy, potentially influencing future business practices and compliance obligations in Vermont.

Note: For precise definitions (e.g., what constitutes “personal data,” the exact monitoring activities prohibited, notice timelines, and enforcement mechanisms), consult the full text of S.90 and any accompanying fiscal or legal analyses released by the Senate committees.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.