safeguard the integrity, privacy, and security of genetic data and provide a civil penalty therefor.

Summary

The bill forces companies that sell genetic tests directly to consumers to give clear privacy notices, get explicit written consent for any use or sharing of genetic data, and let customers view, delete, or destroy their data and samples. It also extends these duties to any service providers the companies hire. Violations can be fined up to $5,000 per breach, but the rules do not apply to standard medical testing, HIPAA‑covered entities, universities, forensic labs, or compliant research projects.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share