Vermont Gov. Scott signs ‘Kids Code’ digital design bill into law
Vermont Gov. Phil Scott, shown here at an earlier signing ceremony, today signed a statewide Kids Code bill into law. The new law will require a duty of care from companies that develop and provide online services or products, ensuring their products will not inflict emotional distress or result in online addiction.
June 12, 2025 — In a surprise move and a positive step for kids online safety, Vermont Gov. Phil Scott earlier today signed s. 69, a significant age-appropriate design code measure, into law.
The bill was one of many ‘Kids Code’ proposals introduced around the nation recently.
Vermont’s bill, introduced by Rep. Monique Priestley and Senators Wendy Harrison, Seth Bongartz, and Patrick Brennan, the Vermont Age-Appropriate Design Code is intended to improve young people’s digital experiences by requiring tech companies to implement privacy-by-default and safety-by-design protections for kids online. This means not collecting or selling their data, setting high privacy standards by default, and avoiding manipulative design.
Vermont Rep. Monique Priestley, left, was one of the primary authors of the Kids Code bill. Priestley is a leading voice on digital safety and data privacy issues at the state level.
Gov. Scott’s endorsement of the bill was a bit of a surprise. Almost exactly one year ago he vetoed a similar bill, citing concerns about legal challenges to the ‘Kids Code’ language.
Pressed by the growing concern of parents and others, Vermont legislators revived the Kids Code measure and passed it with strong support in both legislative chambers.
Gov. scott: ‘we need to protect kids’ who use technology
When signing the bill into law, Gov. Scott issued the following statement:
“As we see more and more kids using technology, I believe most would agree we need to take steps to protect them in a reasonable and responsible way when they’re online. With ongoing lawsuits in other states, I recognize this new law will likely face a legal challenge. But I’m hopeful with the enactment of this law delayed until January 1, 2027, it will allow enough time to provide clarity and change the law if necessary.”
codifies ‘duty of care’ owed to minors
Significantly, the new law asserts that “a covered business that processes a covered minor’s data in any capacity owes a minimum duty of care to the covered minor.”
As spelled out in the law, that means the use of the personal data of a minor and the design of the online service, product, or feature, will not result in:
reasonably foreseeable emotional distress;
reasonably foreseeable compulsive use of the service, product, or feature;
discrimination based on race, ethnicity, sex, disability, sexual orientation, gender identity, gender expression, religion, or national origin.
The new law also requires covered platforms to establish default privacy settings, spelled out in the act, to protect minors.
The full text of the new law is available here.
Learn more
