{"data":{"id":"us-vt/9-v.s.a.-2449d","jurisdiction":"us-vt","citation":"9 V.S.A. § 2449d","heading":"Required default privacy settings and tools [Effective January 1, 2027]","body":"(a) Default privacy settings.\n(1) A covered business shall configure all default privacy settings provided to a covered minor through the online service, product, or feature to the highest level of privacy, including the following default settings:\n(A) not displaying the existence of the covered minor’s account on a social media platform to any known adult user unless the covered minor has expressly and unambiguously allowed a specific known adult user to view their account or has expressly and unambiguously chosen to make their account’s existence public;\n(B) not displaying media created or posted by the covered minor on a social media platform to any known adult user unless the covered minor has expressly and unambiguously allowed a specific known adult user to view their media or has expressly and unambiguously chosen to make their media publicly available;\n(C) not permitting any known adult users to like, comment on, or otherwise provide feedback on the covered minor’s media on a social media platform unless the covered minor has expressly and unambiguously allowed a specific known adult user to do so;\n(D) not permitting direct messaging on a social media platform between the covered minor and any known adult user unless the covered minor has expressly and unambiguously decided to allow direct messaging with a specific known adult user;\n(E) not displaying the covered minor’s location to other users, unless the covered minor expressly and unambiguously shares their location with a specific user;\n(F) not displaying the users connected to the covered minor on a social media platform unless the covered minor expressly and unambiguously chooses to share the information with a specific user;\n(G) disabling search engine indexing of the covered minor’s account profile; and\n(H) not sending push notifications to the covered minors.\n(2) A covered business shall not:\n(A) provide a covered minor with a single setting that makes all of the default privacy settings less protective at once; or\n(B) request or prompt a covered minor to make their privacy settings less protective, unless the change is strictly necessary for the covered minor to access a service or feature they have expressly and unambiguously requested.\n(b) Timely deletion of account. A covered business shall:\n(1) provide a prominent, accessible, and responsive tool to allow a covered minor to request the covered minor’s account on a social media platform be unpublished or deleted; and\n(2) honor that request not later than 15 days after a covered business receives the request.","path":["Title 9: Commerce and Trade","Chapter 062: Protection of Personal Information","Subchapter 006: VERMONT AGE-APPROPRIATE DESIGN CODE ACT"],"source_url":"https://legislature.vermont.gov/statutes/section/09/062/02449d","current_through":"2025 session","vintage":"","retrieved_at":"2026-09-05T14:22:21Z","sha256":"c21063dd2331c938a8e1a0488d41923d48b204d4669aa87e58df6cb95aa8c2e6","source_id":"us-vt","stale":false,"prev":"us-vt/9-v.s.a.-2449c","next":"us-vt/9-v.s.a.-2449e"},"notice":"GroundRules: Original legal text. Not legal advice."}